METHOD AND DEVICE FOR MANAGING DIGITAL USAGE RIGHTS OF DOCUMENTS

• US 20120255026A1
• Filed: 04/02/2011
• Published: 10/04/2012
• Est. Priority Date: 04/02/2011
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Baca, Jim, Aissi, Selim, Ross, Alan, Kohlenberg, Tobias, Morgan, Dennis
• Granted Patent: US 8,458,802 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A method, device, and system for managing digital usage rights of documents includes a mobile computing device having a digital rights management (DRM) enforcement engine included therein. The mobile computing device may communicate with a server, such as an enterprise digital rights management (EDRM) server, to retrieve a secured document and an associated document usage rights policy. The document and usage rights policy are stored in a secured storage of the mobile computing device. The DRM enforcement engine of the mobile computing device provides access to the requested document while locally enforcing the associated document usage rights policy. In some embodiments, the mobile computing device may act as a proxy for other computing devices communicatively coupled to the mobile computing device and/or act as a local EDRM to such computing devices.

Claims

1. A method comprising:

establishing a digital rights management (DRM) enforcement engine on a mobile computing device;

downloading a document and an associated document usage rights policy from a server to the mobile computing device;

storing the document and the associated document usage rights policy in a secured storage on the mobile computing device; and

enforcing the associated document usage rights policy of the document on the mobile computing device using the DRM enforcement engine.

2. The method of claim 1, wherein establishing a DRM enforcement engine comprises establishing a DRM enforcement engine on a security processor of the mobile computing device.

3. The method of claim 1, wherein downloading the document and the associated document usage rights policy comprises authenticating the mobile computing device to the server and downloading the document and the associated document usage rights policy in response to the mobile computing device being authenticated.

4. The method of claim 1, wherein downloading the document and the associated document usage rights policy comprises downloading the document and the associated document usage rights policy from an enterprise digital rights management (EDRM) server over a network.

5. The method of claim 1, wherein downloading the associated document usage rights policy comprises downloading an associated document usage rights policy that correlates digital usage rights to the document based on at least one of:

the identity of the mobile computing device, the identify of the user of the mobile computing device, the location of the mobile computing device, the current date, the current time, a passkey, and connectivity status to an enterprise digital rights management (EDRM) server.

6. The method of claim 5, wherein the digital usage rights to the document include at least one of:

viewing rights, modification rights, printing rights, and saving rights.

7. The method of claim 1, wherein storing the document and the associated document usage rights policy comprises storing the document and the associated document usage rights policy in a secured memory space on the mobile computing device that has been dedicated to a security processor of the mobile computing device.

8. The method of claim 1, wherein storing the document comprises storing the storing the document in an encrypted format.

9. The method of claim 1, wherein enforcing the associated document usage rights policy comprises providing digital usage rights to the document on the mobile computing device pursuant to the associated usage rights policy.

10. The method of claim 9, wherein the digital usage rights to the document include at least one of:

viewing rights, modification rights, printing rights, and saving rights.

11. The method of claim 1, further comprising receiving sensor data from a sensor of the mobile computing device, and

wherein enforcing the associated document usage rights policy comprises providing access to the document on the mobile computing device based on the associated document usage rights policy and the sensor data.

12. The method of claim 1, further comprising:

receiving a request, on the mobile computing device, from another computing device for a secured document stored on the server;

downloading the secured document and a document usage rights policy of the secured document from the server to the mobile computing device in response to receiving the request;

storing the secured document and the document usage rights policy of the secured document in the secured storage of the mobile computing device; and

providing access to the secured document to the another computing device pursuant to the documents usage rights policy of the secured document.

13. The method of claim 1, further comprising:

receiving a request, on the mobile computing device, from another computing device for a secured document stored on the server;

determining whether the secured document is locally stored on mobile computing device;

determining whether a network connection to the server is available; and

in response to (i) the secured document being locally stored on the mobile computing device and (ii) the network connection to the server being unavailable, providing access to the secured document stored on the mobile computing device to the another computing device pursuant to a documents usage rights policy of the secured document stored on the mobile computing device.

14. One or more tangible, machine readable media comprising a plurality of instructions that in response to being executed result in a mobile computing device:

establishing a digital rights management (DRM) enforcement engine in a security processor of the mobile computing device;

receiving a request for a document via the mobile computing device;

downloading the document and an associated document usage rights policy from a server to a secured storage of the mobile computing device in response to receiving the request; and

providing access to the document on the mobile computing device while enforcing the associated document usage rights policy using the DRM enforcement engine.

15. The one or more tangible, machine readable media of claim 14, wherein the plurality of instructions further result in the mobile computing device:

receiving sensor data from a sensor of the mobile computing device; and

providing access to the document on the mobile computing device based on the associated document usage rights policy and the sensor data.

16. The one or more tangible, machine readable media of claim 14, wherein the plurality of instructions further result in the mobile computing device:

receiving a request from another computing device for a secured document stored on the server;

downloading the secured document and a document usage rights policy of the secured document from the server to the secured storage of the mobile computing device in response to receiving the request; and

providing access to the secured document to the another computing device pursuant to the documents usage rights policy of the secured document.

17. The one or more tangible, machine readable media of claim 14, wherein the plurality of instructions further result in the mobile computing device:

receiving a request from another computing device for a secured document stored on the server;

determining whether the secured document is locally stored on mobile computing device and whether a network connection to the server is available; and

in response to (i) the secured document being locally stored on the mobile computing device and (ii) the network connection to the server being unavailable, providing access to the secured document stored on the mobile computing device to the another computing device pursuant to a documents usage rights policy of the secured document stored on the mobile computing device.

18. A mobile computing device comprising:

a digital rights management (DRM) enforcement engine;

a processor; and

a memory device having stored therein a plurality of instructions, which when executed by the processor, cause the DRM enforcement engine to;

download a document and an associated document usage rights policy from a server to the mobile computing device;

store the document and the associated document usage rights policy in a secured memory location of the memory device; and

enforce the associated document usage rights policy of the document on the mobile computing device using the DRM enforcement engine.

19. The mobile computing device of claim 18, wherein the digital rights management (DRM) enforcement engine comprises a security co-processor.

20. The mobile computing device of claim 18 further comprising a sensor, wherein the plurality of instructions further cause the DRM enforcement engine to enforce the associated document usage rights policy of the document based on sensor data received from the sensor.