Techniques for defining using and manipulating rights management data structures

• US 5,920,861 A
• Filed: 02/25/1997
• Issued: 07/06/1999
• Est. Priority Date: 02/25/1997
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Xu, Xuejun, Weber, Robert P., Shear, Victor H., Van Wie, David M., Worsencroft, Kim, Hall, Edwin J., Tomasello, Luke S.
• Primary Examiner(s): Amsbury, Wayne
• Application Number:
  US08/805,804
• Time in Patent Office: 861 Days
• Field of Search: 707/9, 707/4, 707/102, 707/103
• US Class Current: 1/1
• CPC Class Codes: G06F 21/1062 Editing
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/1073 Conversion
• CPC Class Codes: G06F 21/1078 Logging; Metering
• CPC Class Codes: G06F 21/1086 Superdistribution
• CPC Class Codes: G06F 21/1088 by using transactions with atomicity, consistency, or isolation and durability [ACID] properties
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: Y10S 707/99934 : Query formulation, input preparation, or translation
• CPC Class Codes: Y10S 707/99939 : Privileged access
• CPC Class Codes: Y10S 707/99943 : Generating database or data structure, e.g. via user interface

Abstract

A descriptive data structure provides an abstract representation of a rights management data structure such as a secure container. The abstract representation may describe, for example, the layout of the rights management data structure. It can also provide metadata describing or defining other characteristics of rights management data structure use and/or processing. For example, the descriptive data structure can provide integrity constraints that provide a way to state rules about associated information. The abstract representation can be used to create rights management data structures that are interoperable and compatible with one another. This arrangement preserves flexibility and ease of use without compromising security.

Claims

1. A distributed data processing arrangement including:

a first data processing apparatus including;

a central processing unit;

a first memory storing a descriptive data structure, said descriptive data structure including;

information regarding a first organization of elements within a secure container, said information including;

information on the organization of said elements within said secure container; and

information on the location of at least some of said elements within said secure container;

communications means by which said descriptive data structure may be communicated to a data processing apparatus different from said first data processing apparatus;

a second data processing apparatus located at a site different from the site of said first data processing apparatus, said second data processing apparatus including;

a central processing unit;

a second memory including;

a first secure container comprising at least;

data elements organized at least in part in accordance with the information contained in said descriptive data structure; and

at least one rule used to at least in part govern at least one aspect of access to or use of said data elements;

at least one of said rules requiring that information regarding at least one use of at least one of said data elements be at least temporarily recorded; and

at least one computer program designed to use at least a portion of said descriptive data structure in at least one operation on said first secure container or the contents of said first secure container;

said use including at least using said information regarding the organization of elements within said first secure container in a process of identifying and/or locating at least one of said elements; and

communications means by which said second data processing apparatus may receive at least a portion of said descriptive data structure or a copy thereof.

2. A distributed data processing arrangement as in claim 1 in which:

said application includes a browser that uses said information regarding the organization of elements within said first secure container to control, at least in part, the display of at least some information from said secure container.

3. A distributed data processing arrangement as in claim 1, in which:

said computer program is integrated into an operating system.

4. A distributed data processing arrangement as in claim 3, in which:

said operating system is compatible with at least one version of Microsoft Windows.

5. A distributed data processing arrangement as in claim 1, in which:

said descriptive data structure is contained within a second secure container;

said second secure container comprising at least;

said descriptive data structure; and

at least one rule governing at least in part at least one use of at least a portion of said descriptive data structure.

6. A distributed data processing arrangement as in claim 5, in which:

said computer program includes means for using said second container rule to govern at least one aspect of said computer program'"'"'s use of said descriptive data structure.

7. A distributed data processing arrangement as in claim 6, further including:

metadata relating to the contents of said first secure container.

8. A distributed data processing arrangement as in claim 7, in which said metadata is stored in said second secure container.

9. A distributed data processing arrangement as in claim 7, in which said metadata is stored in a third secure container.

10. A distributed data processing arrangement as in claim 9, further including:

a third data processing apparatus, including;

a central processing unit;

a third memory including;

a third secure container including

said metadata; and

at least one rule used to at least in part govern at least one aspect of access to or use of said metadata; and

communications means by which said third data processing apparatus may communicate said third secure container, or a copy of said third secure container, to said second data processing apparatus.

11. A distributed data processing arrangement as in claim 1, in which:

said rules include at least one rule at least in part controlling at least one aspect of an auditing process.

12. A distributed data processing arrangement as in claim 1, in which:

said rules include at least one rule at least in part controlling at least one aspect of a budgeting process.

13. A distributed data processing arrangement as in claim 1, in which said second data processing apparatus includes a secure electronic appliance.

14. A method of using a descriptive data structure, at a first data processing arrangement located at a first site, said method comprising:

at a communications port of said first data processing arrangement, receiving a first secure container from a site remote from said first site, said first secure container comprising at least (a) content and (b) at least one rule designed to at least in part govern at least one use of or access to said content, said governance including at least a requirement that at least some information relating to said use or access be at least temporarily stored;

at said communications port, receiving a second secure container from a site remote from said first site, said second secure container comprising at least (a) a descriptive data structure including information at least in part describing or representing at least one aspect of the organization of said first secure container content; and

(b) at least one rule designed to at least in part govern at least one use of or access to said descriptive data structure;

using said second container rule to gain access to at least a portion of said descriptive data structure; and

using said descriptive data structure portion in the process of making at least one use of said first secure container content.

15. A method as in claim 14, in which:

said use of said descriptive data structure portion includes using information from said descriptive data structure relating to the organization of said first secure container content.

16. A method as in claim 15, in which:

said use of said descriptive data structure portion further includes using said organization information to identify a specific portion of said first secure container content.

17. A method as in claim 16, in which:

said specific portion of said first secure container contents includes information identifying or describing at least one additional portion of said first secure container contents; and

said use of said descriptive data structure portion is followed by displaying said identification or description information.

18. A method as in claim 17, in which:

said first secure container contents identification or description information includes a title of said additional portion of said first secure container contents.

19. A method as in claim 17, in which:

said first secure container contents identification or description information includes a summary of said additional portion of said first secure container contents.

20. A method as in claim 16, in which:

said first data processing arrangement further includes a first computer program including a descriptive data structure interpreter; and

said step of using said descriptive data portion includes said first computer program making said use.

21. A method as in claim 20, in which:

said first computer program includes a browser, and

said step of using said descriptive data structure portion further includes

said browser using said descriptive data structure to identify and locate a portion of said first secure container content; and

said browser causing the display of said located first secure container content portion.

22. A method as in claim 21, in which:

said step of said browser using said descriptive data structure to identify and locate a portion of said first secure container content further includes said browser receiving an element identifier from said descriptive data structure, said element identifier identifying said first secure container content portion; and

said step of said browser causing the display of said located first secure container content portion further includes said browser accessing said first secure container content portion using said element identifier.

23. A method as in claim 22, further comprising:

following said identification, using at least one rule from said first secure container rules to access said identified first secure container content portion.

24. A method as in claim 23, further comprising:

at said communications port, receiving a third secure container including (1) metadata related to said descriptive data structure; and

(2) at least one rule designed to at least in part govern at least one use of or access to said metadata; and

said step of using said descriptive data structure further including;

in said descriptive data structure, accessing a reference to said metadata;

using at least one rule from said third container to access at least a portion of said metadata; and

using said metadata in the process of using said descriptive data structure in connection with making said use of said third secure container contents.

25. A method as in claim 24, in which:

said step of using said metadata includes using information contained in said metadata to at least in part determine whether at least a portion of said first secure container content should be displayed to a user.

26. A method as in claim 25, wherein using said metadata includes:

the metadata includes information specifying that specified information must be displayed if some or all of said first secure container contents are displayed; and

said step of using said metadata includes displaying the specified information.

27. A method as in claim 26, in which:

said specified information includes information identifying at least one owner or creator of at least a portion of said first secure container content.

28. A method as in claim 24, in which:

said first secure container is received from a second data processing arrangement; and

said second secure container and said third secure container are received from a third data processing arrangement;

said second data processing arrangement and said third data processing arrangement being located at locations separate from each other, and each separate from the site at which said first data processing arrangement is located.

29. A method as in claim 14, in which:

said first secure container and said second secure container are received at said first data processing arrangement at different times.

30. A method as in claim 14, in which:

said first secure container is received from a second data processing arrangement; and

said second secure container is received from a third data processing arrangement;

said second data processing arrangement and said third data processing arrangement being located at locations separate from each other, and each separate from the site at which said first data processing arrangement is located.

31. A method as in claim 14, in which:

said governance further includes at least in part controlling at least one aspect of an auditing process.

32. A method as in claim 14, in which:

said governance further includes at least in part controlling at least one aspect of a budgeting process.

33. A method as in claim 14, in which said first data processing arrangement includes a secure electronic appliance.

34. A descriptive data structure embodied on a computer-readable medium or other logic device including the following elements:

a representation of the format of data contained in a first rights management data structure

said representation including;

element information contained within said first rights management data structure; and

organization information regarding the organization of said elements within said first rights management data structure; and

information relating to metadata, said metadata including;

metadata rules used at least in part to govern at least one aspect of use and/or display of content stored within a rights management data structure,

said metadata rules including at least one rule specifying that information relating to at least one use or display of said content be recorded and/or reported.

35. A descriptive data structure as in claim 34, in which:

said first rights management data structure comprises a first secure container.

36. A descriptive data structure as in claim 35, in which:

said first secure container comprises;

said content; and

rules at least in part governing at least one use of said content.

37. A descriptive data structure as in claim 36, wherein the descriptive data structure is stored in said first secure container.

38. A descriptive data structure as in claim 36, in which:

said metadata is stored outside said descriptive data structure; and

said information relating to metadata includes information regarding the location at which said metadata is stored.

39. A descriptive data structure as in claim 38, in which:

said metadata is stored in a second secure container.

40. A descriptive data structure as in claim 36, in which:

said metadata includes at least one display rule at least in part governing the display of at least a portion of said content.

41. A descriptive data structure as in claim 40, in which:

said content includes source information at least in part identifying an author, creator, publisher and/or owner of at least a portion of said content; and

said metadata display rule requires display of said source information under circumstances specified by said metadata display rule.

42. A descriptive data structure as in claim 35, in which:

said metadata rules include at least one creation rule at least in part governing the creation of a specific example of said first secure container.

43. A descriptive data structure as in claim 42, in which:

said metadata creation rules include at least one rule at least in part specifying at least some information which must be included with said specific example of said first secure container when said specific example is created.

44. A descriptive data structure as in claim 34, further including:

a representation of the format of data contained in a second rights management data structure,

said second rights management data structure differing in at least one respect from said first rights management data structure.

45. A descriptive data structure as in claim 44, in which:

said information regarding elements contained within said first rights management data structure includes information relating to the location of at least one such element.

46. A descriptive data structure as in claim 44, further including:

a first target data block including information relating to a first target environment in which the descriptive data structure may be used.

47. A descriptive data structure as in claim 46, further including:

a second target data block including information relating to a second target environment in which the descriptive data structure may be used,

said second target environment differing in at least one respect from said first target environment.

48. A descriptive data structure as in claim 46, further including:

a source message field containing information at least in part identifying the source for the descriptive data structure.

49. A descriptive data structure as in claim 48, in which:

said source identification information includes information relating to at least one aspect of the source environment in which said descriptive data structure was at least in part created.

50. A descriptive data structure as in claim 49, in which:

said information relating to at least one aspect of said source environment includes information relating to security present at said source environment.

51. A descriptive data structure as in claim 49, in which:

said source message field further contains a source seal.

52. A descriptive data structure as in claim 51, in which:

said source seal is encrypted based on a private key present at said source environment.

53. A descriptive data structure as in claim 52, in which:

said source seal includes a hash of at least a portion of said descriptive data structure.

54. A descriptive data structure as in claim 52, further including:

information related to a certificate from which a public key corresponding to said private key may be obtained.

55. A descriptive data structure as in claim 52, in which:

said certificate is stored in said descriptive data structure.

56. A descriptive data structure as in claim 34, in which:

said metadata rules include at least one rule at least in part controlling at least one aspect of an auditing process.

57. A descriptive data structure as in claim 34, in which:

said metadata rules include at least one rule at least in part controlling at least one aspect of a budgeting process.

58. A method of creating a first secure container, said method including the following steps;

accessing a descriptive data structure, said descriptive data structure including or addressing

organization information at least in part describing a required or desired organization of a content section of said first secure container, and

metadata information at least in part specifying at least one step required or desired in creation of said first secure container;

using said descriptive data structure to organize said first secure container contents;

using said metadata information to at least in part determine specific information required to be included in said first secure container contents; and

generating or identifying at least one rule designed to control at least one aspect of access to or use of at least a portion of said first secure container contents.

59. A method as in claim 58, in which:

said descriptive data structure is contained in a second secure container, said second secure container governed by at least one rule at least in part governing at least one use of said descriptive data structure; and

said step of accessing said descriptive data structure includes complying with said second secure container rule.

60. A method as in claim 59, in which:

said second secure container rule requires the communication of certain information to an external site; and

said step of complying with said second secure container rule includes initiating and completing said required communication.

61. A method as in claim 60, in which:

said communicated information at least in part relates to the identity of the site at which said descriptive data structure is used in the process of creation of said first secure container and/or to the identity of a user at said site.

62. A method as in claim 59 in which

said second secure container further includes said first secure container rule;

and

said step of generating or identifying said first secure container rule includes accessing said first secure container rule from said second secure container.

63. A method as in claim 58, further including:

using information contained in or addressed by said descriptive data structure to at least in part identify or generate at least one rule to govern at least one aspect of access to or use of said first secure container content.

64. A method as in claim 58, in which:

said creation of said first secure container occurs at a first data processing arrangement located at a first site;

said first data processing arrangement including a communications port; and

said method further includes;

prior to said step of accessing said descriptive data structure, said first data processing arrangement receiving said descriptive data structure from a second data processing arrangement located at a second site,

said receipt occurring through said first data processing arrangement communications port.

65. A method as in claim 64, in which:

said descriptive data structure is received at said first data processing arrangement in a second secure container,

said second secure container being governed by at least one rule controlling at least in part one aspect of access to or use of at least a portion of said descriptive data structure; and

said step of accessing includes complying with said second secure container rule in order to obtain such access.

66. A method as in claim 65, further including:

including a copy of said descriptive data structure in said first secure container.

67. A method as in claim 64, further comprising:

at said first processing site, receiving said metadata through said communications port.

68. A method as in claim 67, in which,

said metadata is received separately from said descriptive data structure.

69. A method as in claim 68, in which:

said descriptive data structure includes a reference to said metadata,

a process running at said first data processing arrangement accesses said reference, and

said process requests delivery of said metadata;

said metadata being received through said first data processing arrangement communications port following said request.

70. A method as in claim 69, in which:

said metadata is received at said first data processing arrangement in a third secure container, said third secure container associated with at least one rule governing at least in part at least one aspect of access to or use of said third secure container; and

said use of said metadata in the process of creation of said first secure container occurs after a process running on said first data processing arrangement has complied with at least one requirement imposed by said third secure container rule.

71. A method as in claim 58, in which:

said specific information required to be included includes information at least in part identifying at least one owner or creator of at least a portion of said first secure container contents.

72. A method as in claim 58, in which:

said specific information required to be included includes a copyright notice.

73. A method as in claim 58, in which:

said descriptive data structure organization information includes information specifying that said first secure container contents will include at least a title and a text section referred to by said title.

74. A method as in claim 73, in which:

said descriptive data structure organization information includes information specifying that said first secure container contents will include at least one advertisement.

75. A method as in claim 74, in which:

said descriptive data structure further includes information relating to the location at which said title, said text section and said advertisement should be stored in said first secure container.

76. A method as in claim 58, in which:

at least a portion of said descriptive data structure organization information includes information specifying fields relating to at least one atomic transaction.

77. A method as in claim 76, in which:

said atomic transaction information fields include fields for offer and acceptance information.

78. A method as in claim 60, in which:

said communicated information at least in part relates to a payment required for use of said descriptive data structure.

79. A method as in claim 58, in which:

said at least one rule at least in part controls at least one aspect of an auditing process.

80. A method as in claim 58, in which:

said at least one rule at least in part controls at least one aspect of a budgeting process.

81. A method as in claim 58, in which said method is carried out at least in part on a secure electronic appliance.

82. A method of using a descriptive data structure including:

at a first data processing arrangement of a value chain participant, receiving a descriptive data structure,

said descriptive data structure including

a template for the organization of content in a secure container;

at said first data processing arrangement, creating a first secure container, said first secure container including;

content organized at least in part in accordance with said template; and

at least one rule designed to at least in part govern at least one access to or use of at least a portion of said content;

communicating said first secure container to a second data processing arrangement located at or associated with a downstream value chain participant; and

said downstream value chain participant opening said first secure container to retrieve at least a portion of said contents,

said opening step including complying with at least one requirement imposed by a first of said first container rule(s).

83. A method as in claim 82, in which:

said descriptive data structure is received at said first data processing arrangement in a second secure container;

said second secure container being associated with at least one rule governing at least in part at least one aspect of access to or use of at least a portion of said descriptive data structure; and

prior to said step of creating said first secure container, at least a portion of said descriptive data structure is accessed from said second secure container,

said access including complying with at least one requirement imposed by said second secure container rule.

84. A method as in claim 83, in which:

said first secure container further includes at least a portion of said descriptive data structure.

85. A method as in claim 83, in which:

said first secure container rule is at least in part specified by information in said descriptive data structure.

86. A method as in claim 85, in which:

said first secure container rule requires that at least one use of at least a portion of said first secure container content be directly or indirectly reported to a clearinghouse.

87. A method as in claim 86, in which:

said reporting includes a payment.

88. A method as in claim 87, further including:

prior to said step of receiving said descriptive data structure at said first data processing arrangement, communicating said descriptive data structure from a third data processing arrangement to said first data processing arrangement,

said third data processing arrangement being associated with at least one clearinghouse.

89. A method as in claim 88, further including:

prior to said step of communicating said descriptive data structure from said third data processing arrangement to said first data processing arrangement, said third data processing arrangement receiving said descriptive data structure from a fourth data processing arrangement;

said descriptive data structure being communicated from said fourth data processing arrangement to said third data processing arrangement in a third secure container,

said third secure container including said descriptive data structure,

said third secure container being associated with at least one rule governing at least one aspect of access to or use of said descriptive data structure contained in said third secure container; and

prior to communication of said descriptive data structure from said third data processing arrangement to said first data processing arrangement, at least one process at said third data processing arrangement complying with at least one requirement imposed by said third secure container rule.

90. A method as in claim 89, in which:

said step of said third data processing arrangement complying with said at least one requirement includes said third data processing arrangement packaging said descriptive data structure into said second secure container, said packaging being at least in part governed by said third secure container rule.

91. A method as in claim 90, in which:

said step of said third data processing arrangement complying with said at least one requirement includes said third data processing arrangement associating at least one rule with said second secure container.

92. A method as in claim 91, in which:

said descriptive data structure includes information relating to organization of data relating to a transaction,

said information including information regarding price.

93. A method as in claim 82, in which:

a second of said first container rules at least in part controls at least one aspect of an auditing process.

94. A method as in claim 82, in which:

a second of said first container rules at least in part controls at least one aspect of a budgeting process.

95. A method as in claim 82, in which said second data processing arrangement includes a secure electronic appliance.

96. A data processing system including:

a first data processing arrangement including;

means for creating a first descriptive data structure, said first descriptive data structure including;

information relating to the organization of data in a first secure container; and

information relating to at least one attribute of said first data processing arrangement;

said information including information relating to the level of security present at said first data processing arrangement;

means for communicating said first descriptive data structure to a second data processing arrangement;

a second data processing arrangement including;

means for receiving said first descriptive data structure from said first data processing arrangement;

means for receiving said first secure container;

means for accessing at least a portion of said descriptive data structure; and

means for using said first data processing arrangement attribute information in determining at least one use to be made of at least a portion of said first secure container.

97. A system as in claim 96, in which:

said second data processing arrangement means for using said first data processing arrangement attribute information includes

means for identifying at least one attribute of the security present at said first data processing arrangement; and

means for using said security information at least in part to specify at least one operation involving said first secure container.

98. A system as in claim 97, in which:

said first descriptive data structure includes a first target data block,

said first target data block containing information designed for a first target environment; and

said second data processing arrangement includes means for identifying and using said first target data block.

99. A system as in claim 98, in which:

said first descriptive data structure includes a second target data block;

said second target data block containing information designed for a second target environment which differs in at least one respect from said first target environment; and

said second data processing arrangement includes said first target environment but not said second target environment.

100. A system as in claim 99, in which:

said first target environment and said second target environment are incompatible in at least one respect.

101. A system as in claim 96, in which said first data processing arrangement includes a secure electronic appliance.