Transparent digital rights management for extendible content viewers

• US 7,171,558 B1
• Filed: 09/22/2000
• Issued: 01/30/2007
• Est. Priority Date: 09/22/2000
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Pistoia, Marco, Pacifici, Giovanni, Mourad, Magda M., Munson, Jonathan P., Youssef, Alaa S., Nadeem, Tamer
• Primary Examiner(s): Vu; Kim
• Assistant Examiner(s): TRUONG, THANHNGA B
• Application Number:
  US09/667,286
• Time in Patent Office: 2,321 Days
• Field of Search: 713/178, 713/201, 713/100, 713/168, 713/193, 713156-157, 713/175, 704/270, 846/09, 846/00, 846/49, 380/37, 380/30, 708/141, 705/1, 705/75, 705/26, 705/51, 705/59, 705/53
• US Class Current: 713/168
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A digital rights management system for controlling the distribution of digital content to player applications. The system comprises a verification system, a trusted content handler, and a user interface control. The verification system is provided to validate the integrity of the player applications; and the trusted content handler is used to decrypt content and to transmit the decrypted content to the player applications, and to enforce usage rights associated with the content. The user interface control module is provided to ensure that users of the player applications are not exposed to actions that violate the usage rights. The preferred embodiment of the present invention provides a system that enables existing content viewers, such as Web browsers, document viewers, and Java Virtual Machines running content-viewing applications, with digital rights management capabilities, in a manner that is transparent to the viewer. Extending content viewers with such capabilities enables and facilitates the free exchange of digital content over open networks, such as the Internet, while protecting the rights of content owners, authors, and distributors. This protection is achieved by controlling access to the content and constraining it according to the rights and privileges granted to the user during the content acquisition phase.

Claims

1. A digital rights management system for controlling the distribution of digital content to player applications including a core rendering application and an extension mechanism, the system comprising:

a verification system to validate the integrity of the player applications, and including a certificate generator for generating a certificate after inspecting the player application code and determining that a certain required property has been met by said code;

a trusted content handler to decrypt content and to transmit the decrypted content to the player applications, using the extension mechanism of the player application, and to enforce usage rights associated with the content; and

a user interface control module to ensure that the user interaction with the player applications does not violate the usage rights by intercepting and filtering messages sent from the user to the player application in accordance with a user rights set obtained by the user;

wherein components of the verification system, the trusted content handler, and user interface control module of the digital rights management system operate independently from the player application, reside locally in an end-user device having said player applications, and are dynamically linked to the applications at run-time; and

wherein the digital rights management system uses the extension mechanism of the player applications to implement the functions of the digital rights management system without modifying the core rendering applications of the player applications.

2. A digital rights management system according to claim 1, wherein the verification system includes an off-line verifier to verify that the player applications have certain properties, and to issue trust certificates to verify that the player applications have said properties.

3. A digital rights management system according to claim 2, wherein the verification system further includes a verifying launcher for verifying that a particular player application is certified as a trusted application before digital content is transmitted to said particular player application.

4. A digital rights management system according to claim 1, wherein the player applications request protected content, and the trusted content handler includes an authenticator to verify that a player application that requests protected content has been authorized by the verification system to access the requested, protected content.

5. A digital rights management system according to claim 1, wherein a user interface control module traps user interface related messages generated as a result of user interactions with player applications, blocks messages that lead to usage rights violations, and passes through other messages to the player applications.

6. A digital rights management method for controlling the distribution of digital content to player applications including a core rendering application and an extension mechanism, the method comprising the steps:

providing a verification system to validate the integrity of the player applications, said verification system including a certificate generator for generating a certificate after inspecting the player application code and determining that a certain required property has been met by said code;

using a trusted content handler to decrypt content and to transmit the decrypted content to the player applications, using the extension mechanism of the player applications, and to enforce usage rights associated with the content; and

providing a user interface control module to ensure that the user interaction with player applications does not violate the usage rights by intercepting and filtering messages sent from the user to the player application in accordance with a user rights set obtained by the user;

wherein components of the verification system, the trusted content handler, and user interface control module of the digital rights management system operate independently from the player application, reside locally in an end-user device having said player applications, and are dynamically linked to the application at run-time; and

wherein the digital rights management system uses the extension mechanism of the player applications to implement the functions of the digital rights management system without modifying the core rendering applications of the player applications.

7. A method according to claim 6, wherein the step of providing a verification system includes the step of providing an off-line verifier to verify that the player applications have certain properties, and to issue trust certificates to verify that the player applications have said properties.

8. A method according to claim 7, wherein the step of providing a verification system further includes the step of providing a verifying launcher for verifying that a particular player application is certified as a trusted application before digital content is transmitted to said particular player application.

9. A method according to claim 6, wherein the player applications request protected content, and the step of using the trusted content handler includes the step of using an authenticator to verify that a player application that requests protected content has been authorized by the verification system to access the requested, protected content.

10. A method according to claim 6, for controlling the distribution of digital content to the player applications when said player applications are installed on end user devices, and wherein:

the step of providing a verification system includes the step of employing the verification system to use a specified verification process to validate the integrity of the player applications and without requiring the player applications to participate in the verification process while the player applications are installed on the end user devices; and

comprising the further steps of;

one of the end users generating a public key/private key pair, registering with a digital rights management server, and sending the public key to said server;

said server using said public key to encrypt a rights file and a content map, and then sending the encrypted rights file and content map to said one of the end users; and

said one of the end users using the private key to decrypt said encrypted rights file and content map.

11. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method for controlling the distribution of digital content to player applications including a core rendering application and an extension mechanism, the method steps comprising:

using a verification system to validate the integrity of the player applications, said verification system including a certificate generator for generating a certificate after inspecting the player application code and determining that a certain required property has been met by said code;

using a trusted content handler to decrypt content and to transmit the decrypted content to the player applications, using the extension mechanism of the player applications, and to enforce usage rights associated with the content by intercepting and filtering messages sent from the user to the player application in accordance with a user rights set obtained by the user; and

using a user interface control module to ensure that the user interaction with player applications does not violate the usage rights;

wherein components of said verification system, the trusted content handler, and user interface control module operate independently from the player applications and reside locally in an end-user device having said player applications, and are dynamically linked to the applications at run-time; and

wherein the digital rights management system uses the extension mechanism of the player applications to implement the functions of the digital rights management system without modifying the core rendering applications of the player applications.

12. A program storage device according to claim 11, wherein the step of using the verification system includes the step of using an off-line verifier to verify that the player applications have certain properties, and to issue trust certificates to verify that the player applications have said properties.

13. A program storage device according to claim 12, wherein the step of using the verification system further includes the step of using a verifying launcher for verifying that a particular player application is certified as a trusted application before digital content is transmitted to said particular player application.

14. A program storage device according to claim 11, wherein the player applications request protected content, and the step of using the trusted content handler includes the step of using an authenticator to verify that a player application that requests protected content has been authorized by the verification system to access the requested, protected content.

15. A code identity and integrity verification system for verifying the integrity or code of player applications including a core rendering application and an extension mechanism, comprising:

a certificate generator for receiving the player applications, for inspecting the player applications code to determine if the player applications code exhibit a predefined property, and for issuing a trust certificate for each of the player applications that exhibits the predefined property;

a certificate repository for receiving and storing trust certificates issued by the certificate generator;

an off-line code verifier for to analyze program code of a particular player application to determine whether said particular player application is certified as a trusted application before digital content is transmitted to said particular player application; and

an authenticator for receiving requests, using the extension mechanism of one of the player applications, to verify that said one player application that requests protected content has been authorized by the verification system to access the requested, protected content, wherein the authenticator operates independently from said applications, resides locally in an end-user device having said applications, and is dynamically linked to said applications at run-time; and

wherein the authentication uses the extension mechanism of said one player application to implement the functions of the authenticator without modifying the core rendering application of said one player application.

16. A code identify and integrity verification system according to claim 15, wherein the code verifier is responsible for launching the player application and verifying the identity and integrity of the code using the information in the trust certificate before launching the application;

the launch procedure returning process identification information, which the code verifier records internally;

the authenticator communicating the same or other process identification information concerning its own process, which it obtains from system service calls, to the code verifier at the time the application requests content from the authenticator;

the code verifier matching this process identification information against the process identification information it recorded;

the code verifier returning a code indicating whether the process was verified or not.

17. A code identity and integrity verification system according to claim 15, wherein the code verifier receives from the authenticator process identification information at the time the player application calls the authenticator;

the code verifier querying the operating system with the process identification information or the file names of all modules loaded for that process;

the code verifier using the information in the trust certificate to verify the identity and integrity of the code modules;

returning a code indicating whether the process was verified or not.

18. A code identity and integrity verification system according to claim 15, wherein the trust certificate includes:

a program identifier identifying said one of the applications;

a property name identifying an attribute certified by the trust certificate;

a code digest of the one application;

a digital signature containing a secret key of the application certifier; and

a certifier identification containing a public key of the application certifier.

19. A method for verifying the identity and integrity of code of player applications including a core rendering application and an extension mechanism, the method comprising the steps:

using a certificate generator for receiving the player applications, for inspecting the player applications code to determine if the player applications code exhibit a predefined property, and for issuing a trust certificate for each of the player applications that exhibits the predefined property;

receiving and storing in a certificate repository trust certificates issued by the certificate generator;

using an off-line code verifier to analyze program code of a particular player application to determine whether said particular player application is certified as a trusted application before digital content is transmitted to said particular player application; and

using an authenticator for receiving requests, using the extension mechanism of one of the player application, to verify that said one player application that requests protected content has been authorized by the verification system to access the requested, protected content, wherein the authenticator operates independently from said applications, resides locally in an end-user device having said applications, and is dynamically linked to said applications at run-time; and

wherein the authentication uses the extension mechanism of said one player application to implement the functions of the authenticator without modifying the core rendering application of said one player application.

20. A method according to claim 19, wherein the trust certificate includes:

a program identifier identifying said one of the applications;

a property name identifying an attribute certified by the trust certificate;

a code digest of the one application;

a digital signature containing a secret key of the application certifier; and

a certifier identification containing a public key of the application certifier.

21. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for verifying, out of process, the identity of code of player applications including a core rendering application and an extension mechanism, said method steps comprising:

using a certificate generator for receiving the player applications, for determining if the player applications exhibit a predefined property, and for issuing a trust certificate for each of the player applications that exhibits the predefined property;

receiving and storing in a certificate repository trust certificates issued by the certificate generator;

using an off-line code verifier to analyze program code of a particular player application to determine whether said particular player application is certified as a trusted application before digital content is transmitted to said particular player application; and

using an authenticator for receiving requests, using the extension mechanism of one of the player application, to verify that said one player application that requests protected content has been authorized by the verification system to access the requested, protected content, wherein the authenticator operates independently from said applications, resides locally in an end-user device having said applications, and is dynamically linked to said applications at run-time; and

wherein the authentication uses the extension mechanism of said one player application to implement the functions of the authenticator without modifying the core rendering application of said one player application.