SYSTEM AND METHOD FOR PARTS-BASED DIGITAL RIGHTS MANAGEMENT

• US 20130124868A1
• Filed: 02/02/2009
• Published: 05/16/2013
• Est. Priority Date: 02/02/2009
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Sorotokin, Peter, Lester, James L.
• Granted Patent: US 9,112,862 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 2220/18 Licensing
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08

Abstract

Various embodiments of a system and method for parts-based digital rights management are described. Various embodiments may include a digital rights management component configured to receive content comprising a plurality of portions of content. The digital rights management component may also receive a license for the encrypted content; the license may include a plurality of permissions each specific to a respective portion of the content. Additionally, each permission may specify one or more access privileges for the respective portion of the content. The digital rights management component may receive a digital signature for the entire license. The digital rights management component may validate the digital signature to determine that the permissions have not been modified. The digital rights management component may also be configured to, in response to determining that said permissions have not been modified, provide access to content in accordance with said license including said permissions.

Claims

1. A system, comprising:

a memory; and

one or more processors coupled to the memory, wherein the memory comprises program instructions executable by the one or more processors to implement a digital rights management component configured to;

receive;

content comprising a plurality of portions of content;

a license for the content, wherein the license comprises a plurality of permissions each specific to a respective portion of the content, wherein each permission specifies one or more access privileges for its respective portion of the content, wherein different ones of the plurality of permissions are specific to different portions of the content such that different access privileges are specified in the license for different portions of the content; and

a digital signature for the entire license such that all of the plurality of permissions of the license are signed together by the same digital signature; and

validate the digital signature to determine that the permissions have not been modified; and

in response to determining that said permissions have not been modified, provide access to said content in accordance with said license including said permissions.

2. The system of claim 1, wherein one or more of said access privileges specifies one or more operations permitted to be performed on the respective portion of the content, said one or more operation comprising one or more of:

accessing data, copying data, printing data, and transferring data to a device.

3. The system of claim 1, wherein said content is received in an encrypted form, wherein said license comprises a master key for decrypting said content, wherein the digital rights management component is configured to decrypt said content with said master key.

4. The system of claim 3, wherein the digital rights management component is configured to:

generate a respective decryption key for each particular portion of encrypted content based on said master key, and

decrypt each portion of the content with the respective decryption key that corresponds to that portion of the content.

5. The system of claim 3, wherein said master key is received in an encrypted form, wherein said license comprises a user identifier;

wherein to decrypt said master key, the digital rights management component is configured to;

perform a key derivation function on said user identifier to generate an intermediate key;

decrypt said master key with a symmetrical decryption function, wherein said intermediate key is utilized as a decryption key for said symmetrical decryption algorithm.

6. The system of claim 1, wherein to determine that said digital signature of the license data is valid, the digital rights management component is configured to:

decrypt the digital signature with a public key to determine a first result;

perform a cryptographic hash function on said license data to determine a second result; and

determine that said first result is equivalent to said second result.

7. The system of claim 6, wherein said public key corresponds to a private key previously utilized to generate said digital signature.

8. A computer-implemented method, comprising:

receiving;

content comprising a plurality of portions of content;

a license for the content, wherein the license comprises a plurality of permissions each specific to a respective portion of the content, wherein each permission specifies one or more access privileges for its respective portion of the content, wherein different ones of the plurality of permissions are specific to different portions of the content such that different access privileges are specified in the license for different portions of the content; and

a digital signature for the entire license such that all of the plurality of permissions of the license are signed together by the same digital signature; and

validating the digital signature to determine that the permissions have not been modified; and

in response to determining that said permissions have not been modified, providing access to said content in accordance with said license including said permissions.

9. The method of claim 8, wherein one or more of said access privileges specifies one or more operations permitted to be performed on the respective portion of the content, said one or more operation comprising one or more of:

accessing data, copying data, printing data, and transferring data to a device.

10. The method of claim 8, wherein said content is received in an encrypted form, wherein said license comprises a master key for decrypting said content, wherein the method comprises decrypting said content with said master key.

11. The method of claim 10, wherein the method further comprises:

generating a respective decryption key for each particular portion of encrypted content based on said master key, and

decrypting each portion of the content with the respective decryption key that corresponds to that portion of the content.

12. The method of claim 10, wherein said master key is received in an encrypted form, wherein said license comprises a user identifier;

wherein to decrypt said master key, the method comprises;

performing a key derivation function on said user identifier to generate an intermediate key;

decrypting said master key with a symmetrical decryption function, wherein said intermediate key is utilized as a decryption key for said symmetrical decryption algorithm.

13. The method of claim 8, wherein to determine that said digital signature of the license data is valid, the method comprises:

decrypting the digital signature with a public key to determine a first result;

performing a cryptographic hash function on said license data to determine a second result; and

determining that said first result is equivalent to said second result.

14. The method of claim 13, wherein said public key corresponds to a private key previously utilized to generate said digital signature.

15. A non-transitory computer-readable storage medium, storing program instructions computer-executable to implement a digital rights management component configured to:

receive;

content comprising a plurality of portions of content;

a license for the content, wherein the license comprises a plurality of permissions each specific to a respective portion of the content, wherein each permission specifies one or more access privileges for the respective portion of its content, wherein different ones of the plurality of permissions are specific to different portions of the content such that different access privileges are specified in the license for different portions of the content;

and a digital signature for the entire license such that all of the plurality of permissions of the license are signed together by the same digital signature; and

validate the digital signature to determine that the permissions have not been modified; and

in response to determining that said permissions have not been modified, provide access to said content in accordance with said license including said permissions.

16. The medium of claim 15, wherein one or more of said access privileges specifies one or more operations permitted to be performed on the respective portion of the content, said one or more operation comprising one or more of:

accessing data, copying data, printing data, and transferring data to a device.

17. The medium of claim 15, wherein said content is received in an encrypted form, wherein said license comprises a master key for decrypting said content, wherein the digital rights management component is configured to decrypt said content with said master key.

18. The medium of claim 17, wherein the digital rights management component is configured to:

generate a respective decryption key for each particular portion of encrypted content based on said master key, and

decrypt each portion of the content with the respective decryption key that corresponds to that portion of the content.

19. The medium of claim 17, wherein said master key is received in an encrypted form, wherein said license comprises a user identifier;

wherein to decrypt said master key, the digital rights management component is configured to;

perform a key derivation function on said user identifier to generate an intermediate key;

decrypt said master key with a symmetrical decryption function, wherein said intermediate key is utilized as a decryption key for said symmetrical decryption algorithm.

20. The medium of claim 15, wherein to determine that said digital signature of the license data is valid, the digital rights management component is configured to:

decrypt the digital signature with a public key to determine a first result;

perform a cryptographic hash function on said license data to determine a second result; and

determine that said first result is equivalent to said second result.

21. The medium of claim 20, wherein said public key corresponds to a private key previously utilized to generate said digital signature.

22. A computer-implemented method, comprising:

executing instructions on a specific apparatus so that binary digital electronic signals representing content comprising a plurality of portions of content are received;

executing instructions on said specific apparatus so that binary digital electronic signals representing a license for the content are received;

wherein the license comprises a plurality of permissions each specific to a respective portion of the content, wherein each permission specifies one or more access privileges for the respective portion of its content, wherein different ones of the plurality of permissions are specific to different portions of the content such that different access privileges are specified in the license for different portions of the content;

executing instructions on said specific apparatus so that binary digital electronic signals representing a digital signature for the entire license such that all of the plurality of permissions are signed together by the same digital signature are received;

executing instructions on said specific apparatus to validate the digital signature to determine that the permissions have not been modified; and

executing instructions on said specific apparatus to, in response to determining that said permissions have not been modified, provide access to said content in accordance with said license including said permissions.