Rights management inter-entity message policies and enforcement

• US 7,284,263 B2
• Filed: 09/14/2006
• Issued: 10/16/2007
• Est. Priority Date: 03/26/2004
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Williams, Roy, Davis, Malcolm H., Waxman, Peter D., Speare, John Gerard
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Simitoski; Michael J
• Application Number:
  US11/531,780
• Publication Number:
  US 20070011750A1
• Time in Patent Office: 397 Days
• Field of Search: 726/1, 726/29, 705/51, 705/59, 709/206, 713/153
• US Class Current: 726/1
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

The present invention provides the ability to compare and enforce policies between trusted entities within a rights management system. For example, policies between the two entities may be received by either entity. They may then be compared to determine the compatibility of the two policies. If compatible, or maybe even without the comparison, other embodiments provide for message server use license, which allows access to the protected portion of a message, thereby permitting an entity to enforce its message policies.

Claims

1. In a rights management system for protecting messages transferred between two trusted entities from unauthorized access, a method of determining if the messages can be transferred based on each others message policies, the method comprising acts of:

receiving a sending entity'"'"'s message policy, which defines the type of operations that a partner entity is allowed to perform on a protected portion of a message;

receiving the partner entity'"'"'s message policy, which defines the type of operations that are to be performed on the message before the partner entity'"'"'s message server can accept the message;

comparing the sending entity'"'"'s message policy with the partner entity'"'"'s message policy; and

based on the comparison, determining if the policies are compatible for transferring the message between the sending and partner entities'"'"' message servers.

2. The method of claim 1, wherein the message policies are chosen from one or more of an anti-virus scanning, an anti-spam scanning and search term indexing.

3. The method of claim 2, wherein the policies are received and compared at the sending entity'"'"'s server for determining if the message should be transferred from the sending entity'"'"'s server to the partner entity'"'"'s message sever.

4. The method of claim 2, wherein the policies are received and compared at the partner entity'"'"'s server for determining if the message should be accepted when transferred from the sending entity'"'"'s server to the partner entity'"'"'s message sever.

5. The method of claim 2, wherein the sending entity receives the partner entity'"'"'s message policies from a directory service.

6. The method of claim 5, wherein the format of the received partner entity'"'"'s message policies is XrML.

7. The method of claim 5, wherein the directory service is one of a DNS, Active Directory, LDAP, XKMS, or UDDI.

8. The method of claim 2, wherein the sending entity receives the partner entity'"'"'s message policies from the partner entity over a SMTP connection.

9. In a rights management system for protecting messages transferred between two trusted entities from unauthorized access, a computer program product for implementing a method of determining if the messages can be transferred based on each others message policies, the computer program product comprising one or more computer readable media having stored thereon computer executable instructions that, when executed by a processor, can cause the system to perform the following:

receive a sending entity'"'"'s message policy, which defines the type of operations that a partner entity is allowed to perform on a protected portion of a message;

receive the partner entity'"'"'s message policy, which defines the type of operations that are to be performed on the message before the partner entity'"'"'s message server can accept the message;

compare the sending entity'"'"'s message policy with the partner entity'"'"'s message policy; and

based on the comparison, determine if the policies are compatible for transferring the message between the sending and partner entities'"'"' message servers.

10. The computer program product of claim 9, wherein the message policies are chosen from one or more of an anti-virus scanning, an anti-spam scanning and search term indexing.

11. The computer program product of claim 10, wherein the policies are received and compared at the sending entity'"'"'s server for determining if the message should be transferred from the sending entity'"'"'s server to the partner entity'"'"'s message sever.

12. The computer program product of claim 10, wherein the policies are received and compared at the partner entity'"'"'s server for determining if the message should be accepted when transferred from the sending entity'"'"'s server to the partner entity'"'"'s message sever.

13. The computer program product of claim 10, wherein the sending entity receives the partner entity'"'"'s message policies from a directory service.

14. The computer program product of claim 13, wherein the format of the received partner entity'"'"'s message policies is XrML.

15. The computer program product of claim 13, wherein the directory service is one of a DNS, Active Directory, LDAP, XKMS, or UDDI.

16. The computer program product of claim 10, wherein the sending entity receives the partner entity'"'"'s message policies from the partner entity over a SMTP connection.