System for controlling the distribution and use of composite digital works

• US 5,638,443 A
• Filed: 11/23/1994
• Issued: 06/10/1997
• Est. Priority Date: 11/23/1994
• Status: Expired due to Term

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: Xerox Corporation (Xerox Holdings Corp.)
• Inventors: Bobrow, Daniel G., Pirolli, Peter L. T., Stefik, Mark J.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/344,776
• Time in Patent Office: 930 Days
• Field of Search: 380/4, 395/164, 235/380
• US Class Current: 705/54
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G11B 20/00789 wherein the usage restriction limits the number of functional copies, which can be accessed at a time, e.g. electronic bookshelf concept, virtual library, video rentals or check-in/check out
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04N 21/23412 for generating or manipulating the scene composition of objects, e.g. MPEG-4 objects
• CPC Class Codes: H04N 21/2396 characterized by admission policies admission control, resource allocation in open networks H04L12/5692; arrangements for network security using user profiles for access control H04L63/102; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/44012 involving rendering scenes according to scene graphs, e.g. MPEG-4 scene graphs
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

A system for controlling use and distribution of composite digital works. A digital work is comprised of a description part and a content part. The description part contains control information for the composite digital work. The content part stores the actual digital data comprising the composite digital work. The description part is logically organized in an acyclic structure, e.g. a tree structure. For a composite digital work each node of the acyclic structure represents an individual digital work or some distribution interest in the composite digital work. A node in the acyclic structure is comprised of an identifier of the individual work, usage rights for the individual digital work and a pointer to the digital work. Composite digital works are stored in repositories. A repository has two primary operating modes, a server mode and a requester mode. When operating in a server mode, the repository is responding to requests to access digital works. When operating in requester mode, the repository is requesting access to a digital work. A repository will process each request to access a composite digital work by examining the usage rights for each individual digital work found in the description part of the composite digital work.

Claims

1. A method for controlling access to and distribution of a composite digital work between computer based systems, said composite digital work comprised of a plurality of parts, each part representing an individual digital work, said method comprising the steps of:

a) creating an instance of a composite digital work;

b) creating a description structure for said composite digital work, said description structure comprising a plurality of description blocks, each of said description blocks for storing access information for at least one of said plurality of parts of said composite digital work, said access information specifying how said corresponding part may be used or distributed;

c) storing said description structure and said composite digital work in a repository;

d) said repository receiving a request to access said composite digital work, said request having request access information indicating how a requested composite digital work will be used;

e) said repository comparing the access information for each description block of said description structure of said composite digital work to said request access information; and

f) said repository granting said request to access said composite digital work if it is determined that said request access information is in the scope of the access information for each description block of said description structure of said composite digital work.

2. The method as recited in claim 1 wherein said step of creating an instance of a composite digital work is further comprised of the steps of:

a1) creating a first part of said composite digital work;

a2) creating a first description block for said first part of said composite digital work;

a3) obtaining an existing second part for said composite digital work, said second digital work having a second description block;

a4) combining said first part and said second part to form said composite digital work; and

a5) creating a third description block for said composite digital work.

3. The method as recited in claim 2 wherein said step of creating a description structure for said composite digital work is further comprised of the step of linking said first description block, said second description block and said third description blocks to correspond to the organization of said composite digital work.

4. The method as recited in claim 3 wherein said step of storing said description structure and said composite digital work in a repository is further comprised of the steps of storing said description structure in a first storage means and said composite digital work in a second storage means.

5. The method as recited in claim 4 wherein each of said first description block, said second description block and said third description block is comprised of a pointer to a corresponding part of said composite digital work stored in said second storage means and a control information part for storing usage rights for said corresponding part of said digital work and said step of creating a first description block for said first part of said composite digital work is further comprised of the step of specifying a first set of usage rights and storing in said control information part of said first description block.

6. The method as recited in claim 5 wherein said step of creating a third description block for said composite digital work is further comprised of the step of specifying a second set of usage rights and storing in said control information part of said third description block.

7. The method as recited in claim 6 wherein said step of said repository comparing the access information for each description block of said description structure of said composite digital work to said request access information is further comprised of the steps of:

e1) said repository identifying a usage right from said request access information;

e2) for each description block said repository performing the steps of;

determining if said identified usage right is in its associated control information part;

if said usage right is not in said control information part indicating that said request access information is not in the scope of the access information for said description block.

8. The method as recited in claim 6 wherein said step of said repository comparing the access information for each description block of said description structure of said composite digital work to said request access information is further comprised of the steps of:

e1) said repository identifying a usage right from said request access information;

e2) for each description block said repository performing the steps of;

determining if said identified usage right is in its associated control information part;

if said usage right is not in said control information part said repository indicating that said request access information is not in the scope of the access information for said description block;

if said usage right is in said control information, said repository determining if access parameters for said right are satisfied based on said request access information;

if said access parameters are not satisfied, said repository indicating that said request access information is not in the scope of the access information for said description block.

9. The method as recited in claim 1 wherein said step of creating a description structure for said composite digital work is further comprised of the step of adding a shell description block for specifying usage rights and fees of a distributor of said composite digital work.

10. The method as recited in claim 2 wherein said step of obtaining an existing second part for said composite digital work is further comprised of the step of extracting said second part from an existing digital work.

11. The method as recited in claim 5 wherein said step of creating a third description block for said composite digital work is further comprised of the step of specifying a second set of usage rights and storing in said control information part of said third description block, said second set of usage rights including a usage right indicating that no subsequent shell description blocks for specifying usage rights and fees of a distributor may be added to said description structure.

12. A repository for storing and controlling access to composite digital works comprising:

an interface means for receiving requests to access digital works stored therein;

a first storage unit for storing digital data representing digital works;

a second storage unit for storing description structures for digital works stored in said first storage unit, said description structure comprising a plurality of description blocks, each of said description blocks comprising;

a pointer to a parent description block, one or more pointers to children description blocks, a pointer to a corresponding part of a digital work stored in said first storage unit and a usage rights part for storing one or more usage rights, each of said usage rights specifying an instance of how said part may be used;

a transactions processor for processing requests to access a digital work, said transactions processor comprising a means for identifying a usage right from a request to access said digital work, and a means for determining if a description block contains an identified usage right.

13. The repository as recited in claim 12 wherein said transaction processor is further comprised of usage rights conflict resolution means for resolving usage rights conflicts between different description blocks.

14. The repository as recited in claim 13 wherein said conflict resolution means will grant access to a part of said composite digital work associated with a description block having said identified usage right and denying access to a part of said composite digital work associated with a description block not having said identified usage right.

15. The repository as recited in claim 13 wherein said conflict resolution means will deny access to said composite digital work if any description block does not contain said identified usage right.

17. The system as recited in claim 15 wherein said storage means of a repository is further comprised of:

a first storage component for storing a description structure for each digital work; and

a second storage component for storing said digital work.

18. The system as recited in claim 17 wherein said first storage component is a solid state memory and said second storage component is a magnetic memory.

19. The system as recited in claim 17 wherein said first storage component is a solid state memory and said second storage component is a solid state memory.

20. The system as recited in claim 17 wherein said first storage component is a solid state memory and said second storage component is an optical memory.

16. A system for controlling access to and usage of composite digital works between computer based systems, said composite digital work comprised of a plurality of digital works, said system comprising:

means for attaching usage rights to digital works, said usage rights indicating how a recipient of a digital work may use and subsequently distribute said digital work;

means for creating a description structure for said composite digital work, said description structure comprising a description block for each digital work of said composite digital work, said description block comprising said usage rights for said digital work and addressing information for said digital work;

a plurality of repositories for managing exchange of composite digital works based on usage rights attached to said digital works comprising a composite digital work, each of said plurality of repositories associated with a computer based system and comprising a storage means for storing digital works, a processor having a first server mode of operation for processing access requests to said digital works and a second requester mode of operation for initiating requests to access digital works, a timekeeping means and a connection means;

a rendering system for rendering of digital works, said rendering system comprising a rendering repository for secure receipt of composite digital works and a rendering device having means for converting digital signals to signals suitable for rendering of said digital works comprising said composite digital work.

21. The system as recited in claim 16 wherein one of said plurality of digital works is a text work and said rendering device is a printing device.

22. The system as recited in claim 16 wherein one of said plurality of digital works is a video work and said rendering device is a video playback device.

23. The system as recited in claim 16 wherein one of said plurality of digital works is an audio work and said rendering device is an audio playback device.

24. The system as recited in claim 16 wherein said composite digital work is a multimedia work and each of said plurality of digital works is of a different media and said rendering system is further comprised of a rendering device for each of said different media.