Binding content to a portable storage device or the like in a digital rights management (DRM) system

• US 7,231,669 B2
• Filed: 02/27/2006
• Issued: 06/12/2007
• Est. Priority Date: 08/25/2000
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Leung, Yuen Yu, Peinado, Marcus, Strom, Clifford P.
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): Dada, Beemnet W
• Application Number:
  US11/364,731
• Publication Number:
  US 20060150257A1
• Time in Patent Office: 470 Days
• Field of Search: 726/26, 726/30, 726/31, 380/201, 380/277, 380/286, 705/56, 705/59
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/41407 embedded in a portable device, e.g. video client on a mobile phone, PDA, laptop constructional details of equipment or arrangements specially adapted for portable computer application G06F1/1626; arrangements specially adapted for mobile receivers in broadcast systems H04H20/57
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08

Abstract

Digital content is rendered on a device by transferring the content to the device and obtaining a digital license corresponding to the content. A sub-license corresponding to and based on the obtained license is composed and transferred to the device, and the content is rendered on the device only in accordance with the terms of the sub-license. The content is encrypted and decryptable according to a content key, and the sub-license includes the content key encrypted and decryptable according to a secret. The sub-license also includes indexing information identifying the secret to the device. The indexing information in the sub-license is obtained to identify the secret, and the secret is acquired based at least in part on the indexing information. The secret is then applied to the encrypted content key to decrypt and obtain the content key, and the obtained content key is applied to the encrypted content to decrypt and obtain the content. To compose the sub-license and also to render the content, the secret is derived by obtaining a device identifier, acquiring a super-secret, and applying the obtained device identifier and super-secret to a function to derive the secret.

Claims

1. A method for rendering digital content on a device, the method comprising:

receiving the content onto the device, the content being encrypted and decryptable according to a content key;

receiving a digital license corresponding to the content onto the device, wherein the license includes the content key encrypted into a form un-decryptable by the device and wherein the license includes the content key encrypted and decryptable according to a secret, the license also including indexing information identifying the secret to the device;

obtaining a sub-license, the sub-license comprising re-encrypting the content key into a form that is decryptable by the device and placing the re-encrypted content key in the sub-license;

obtaining the indexing information in the license to identify the secret;

acquiring the secret based at least in part on the indexing information;

applying the secret to the encrypted content key to decrypt and obtain the content key; and

applying the obtained content key to the encrypted content to decrypt and obtain the content.

2. The method of claim 1 wherein the license includes a signature, the method further comprising verifying the license based on the signature thereof and the secret.

3. The method of claim 1 wherein the license includes a rights description describing rights conferred by the license, the method comprising rendering the corresponding content only in accordance with the rights description.

4. A method for composing a digital license for rendering digital content on a device, the content being encrypted and decryptable according to a content key, the device having an identifier, the method comprising:

deriving a secret by;

obtaining the device identifier;

acquiring a super-secret that is also acquirable by the device; and

applying the obtained device identifier and the super-secret to a function to derive the secret;

(SECRET)=function (device identifier, (SUPER-SECRET));

encrypting the content key according to the derived secret such that the content key is decryptable according to the secret; and

placing the encrypted content key in the digital license, the digital license used for rendering digital content on the device,

wherein the super-secret is identified by indexing information, the method further comprising placing the indexing information in the digital license, whereby the device may obtain the indexing information from the digital license and thereby identify the super-secret by way of the indexing information.

5. The method of claim 4 wherein the content has a content ID, the method comprising deriving a secret by:

obtaining the content ID of the content;

obtaining the device identifier;

acquiring a super-secret that is also acquirable by the device; and

applying the obtained content ID, device identifier, and super-secret to a function to derive the secret;

(SECRET)=function (content ID, device identifier, (SUPER-SECRET)).

6. The method of claim 4 wherein acquiring the super-secret comprises:

obtaining a super-super-secret;

deciding on an indexing value j identifying a particular super-secret; and

applying the obtained super-super-secret and the indexing value j to a function to derive the super-secret identified by the indexing value j;

(SUPER-SECRET)=function ((SUPER-SUPER-SECRET), j),

the method further comprising placing the indexing value j in the digital license, whereby the device may obtain the indexing value j from the license and thereby identify the super-secret by way of the indexing value.

7. The method of claim 6 wherein acquiring the super-secret comprises:

obtaining a super-super-secret having an indexing value k;

deciding on an indexing value j identifying a particular super-secret; and

applying the obtained super-super-secret and the indexing values j, k to a function to derive the super-secret identified by the indexing value j;

(SUPER-SECRET)=function ((SUPER-SUPER-SECRET), j, k),

the method further comprising placing the indexing values j, k in the license, whereby the device may obtain the indexing values j, k from the license and thereby identify the super-secret by way of the indexing value.

8. A computer-readable medium having computer-executable instructions thereon for rendering digital content on a device, the instructions comprising modules including:

a first module for receiving the content onto the device, the content being encrypted and decryptable according to a content key;

a second module for receiving a digital license corresponding to the content onto the device, the license including the content key encrypted and decryptable according to a secret, the license also including indexing information identifying the secret to the device, the second module receiving the digital license after the content is received on the device, wherein the license includes the content key encrypted into a form un-decryptable by the device, the license including a sub-license comprising a re-encrypted content key that is decryptable by the device;

a third module for obtaining the indexing information in the license to identify the secret;

a fourth module for acquiring the secret based at least in part on the indexing information;

a fifth module for applying the secret to the encrypted content key to decrypt and obtain the content key; and

a sixth module for applying the obtained content key to the encrypted content to decrypt and obtain the content.

9. The medium of claim 8 wherein the license includes a signature, the medium further comprising a seventh module for verifying the license based on the signature thereof and the secret.

10. The medium of claim 8 wherein the license includes a rights description describing rights conferred by the license, the medium further comprising a seventh module for rendering the corresponding content only in accordance with the rights description.

11. A computer-readable medium having computer-executable instructions thereon for composing a digital license for rendering digital content on a device, the content being encrypted and decryptable according to a content key, the device having an identifier, the instructions comprising modules including:

a first module for deriving a secret by;

obtaining the device identifier;

acquiring a super-secret that is also acquirable by the device; and

applying the obtained device identifier and super-secret to a function to derive the secret;

(SECRET)=function (device identifier, (SUPER-SECRET));

a second module for encrypting the content key according to the derived secret such that the content key is decryptable according to the secret; and

a third module for placing the encrypted content key in the digital license, the digital license used for rendering digital content on the device,

wherein the super-secret is identified by indexing information, the medium further comprising a fourth module for placing the indexing information in the digital license, whereby the device may obtain the indexing information from the digital license and thereby identify the super-secret by way of the indexing information.

12. The medium of claim 11 wherein the content has a content ID, the first module deriving a secret by:

obtaining the content ID of the content;

obtaining the device identifier;

acquiring a super-secret that is also acquirable by the device; and

applying the obtained content ID, device identifier, and super-secret to a function to derive the secret;

(SECRET)=function (content ID, device identifier, (SUPER-SECRET)).

13. The medium of claim 12 wherein the first module acquires the super-secret by:

obtaining a super-super-secret;

deciding on an indexing value j identifying a particular super-secret; and

applying the obtained super-super-secret and the indexing value j to a function to derive the super-secret identified by the indexing value j;

(SUPER-SECRET)=function ((SUPER-SUPER-SECRET), j),

the medium further comprising a fourth module for placing the indexing value j in the license, whereby the device may obtain the indexing value j from the license and thereby identify the super-secret by way of the indexing value.

14. The medium of claim 13 wherein the first module acquires the super-secret by:

obtaining a super-super-secret having an indexing value k;

deciding on an indexing value j identifying a particular super-secret; and

applying the obtained super-super-secret and the indexing values j, k to a function to derive the super-secret identified by the indexing value j;

(SUPER-SECRET)=function ((SUPER-SUPER-SECRET), j, k),

the medium further comprising a fourth module for placing the indexing values j, k in the license, whereby the device may obtain the indexing values j, k from the license and thereby identify the super-secret by way of the indexing value.