System for controlling the distribution and use of digital works

• US 7,389,270 B2
• Filed: 08/08/2005
• Issued: 06/17/2008
• Est. Priority Date: 11/23/1994
• Status: Expired due to Fees

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Stefik, Mark J., Pirolli, Peter L. T.
• Primary Examiner(s): Abdi, Kambiz
• Application Number:
  US11/198,216
• Publication Number:
  US 20060004665A1
• Time in Patent Office: 1,044 Days
• Field of Search: 705 51- 54, 705 56- 59, 380201-202, 380/231, 713150-194
• US Class Current: 705/51
• CPC Class Codes: A61B 2017/0046 with a releasable handle; with handle and operating part separable
• CPC Class Codes: A61B 2034/301 for introducing or steering flexible instruments inserted into the body, e.g. catheters or endoscopes
• CPC Class Codes: A61B 2090/031 torque limiting
• CPC Class Codes: A61B 2090/376 using X-rays, e.g. fluoroscopy
• CPC Class Codes: A61B 34/30 Surgical robots
• CPC Class Codes: A61B 34/37 Master-slave robots A61B34/35 takes precedence
• CPC Class Codes: A61M 25/0113 Mechanical advancing means, e.g. catheter dispensers
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 10/101 Collaborative creation, e.g. joint development of products or services
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 50/184 : Intellectual property management
• CPC Class Codes: H04L 12/14 : Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 12/1403 : Architecture for metering, charging or billing
• CPC Class Codes: H04L 12/146 : using digital cash
• CPC Class Codes: H04L 12/1485 : Tariff-related aspects
• CPC Class Codes: H04L 12/1496 : involving discounts
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 : Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 61/00 : Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/45 : Network directories; Name-to-address mapping
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 : wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0464 : using hop-by-hop encryption, i.e. wherein an intermediate entity decrypts the information and re-encrypts it before forwarding it
• CPC Class Codes: H04L 63/0807 : using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/104 : Grouping of entities
• CPC Class Codes: H04L 63/105 : Multiple levels of security
• CPC Class Codes: H04L 63/123 : received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3213 : using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3297 : involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04N 21/23412 : for generating or manipulating the scene composition of objects, e.g. MPEG-4 objects
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/26613 : for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/6332 : directed to client
• CPC Class Codes: H04N 21/6377 : directed to server one-way streaming services wherein the source is controlled by the destination H04L65/613
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 7/16 : Analogue secrecy systems; Analogue subscription systems
• CPC Class Codes: Y10S 707/99939 : Privileged access
• CPC Class Codes: Y10S 707/99945 : Object-oriented database structure processing

Abstract

A method, system and software for securely rendering digital documents, including storing a digital document in a document platform; and storing a usage right associated with the digital document. The usage right specifies a manner of use indicating the manner in which the digital document can be rendered by the document platform. The digital document comprises plural parts of digital content. The usage right includes plural usage rights respectively associated with each of the plural parts of digital content. Whether one of the parts of the digital document may be rendered by the document platform is determined based a respective usage right. If the respective usage right allows the digital document to be rendered on the document platform, the corresponding part of the digital document is rendered by the document platform.

Claims

1. A method for securely rendering digital documents, comprising:

storing a digital document in a document platform;

storing at least one usage right specification linked with the digital document,

wherein the at least one usage right specification specifies a manner of use indicating the manner in which the digital document is allowed to be rendered by the document platform,

the digital document comprises plural parts of digital content, and

the at least one usage right specification includes plural usage rights respectively linked with each of the plural parts of digital content;

determining whether a rendering request for one of the parts of the digital document by the document platform based on a respective usage right of the plural usage rights is allowed; and

when the respective usage right allows the digital document to be rendered on the document platform, rendering the corresponding part of the digital document by the document platform.

2. A method of claim 1, wherein the manner of use includes the number of times the digital document is allowed to be rendered.

3. A method as recited in claim 1, wherein the step of storing comprises storing at least one usage right specification on the document platform.

4. A method as recited in claim 1, wherein the step of storing comprises storing at least one usage right specification on a device separate from the document platform.

5. A method as recited in claim 1, wherein the determining step comprises enforcing terms of a usage agreement defined by the at least one usage right specification.

6. A method as recited in claim 1, wherein the at least one usage right specification specifies a type of use of the digital document.

7. A method as recited in claim 1, wherein at least one part of the content and at least one usage right specification are included in different files.

8. A method as recited in claim 1, wherein at least one part of the content and at least one usage right specification are stored in the same file.

9. A method as recited in claim 1, wherein at least a portion of the digital content is a software program.

10. A method as recited in claim 1, wherein at least one usage right specification comprises a revenue identifier for identifying a revenue owner of the digital content.

11. The method as recited in claim 1, wherein at least one usage right specification also specifies one or more conditions which must be satisfied before the manner of rendering is exercised.

12. A method as recited in claim 11, wherein at least one condition includes determining the presence of a digital ticket.

13. A method as recited in claim 1, wherein at least one of the usage fights or a part of the content are stored on a removable storage device.

14. A method as recited in claim 1, wherein at least one part of the content and at least one usage right specification are stored on the same device.

15. The method as recited in claim 1, wherein at least one of the content and at least one usage fight specification are stored on different devices.

16. A method as recited in claim 1, wherein the method is implemented with a computer system including one or more hardware and/or software components.

17. A method as recited in claim 1, wherein the method is implemented via one or more computer readable instructions embedded on a computer readable medium and configured to cause one or more computer processors to perform the steps of the method.

18. A method for securely rendering digital documents, comprising:

storing a digital document in a document repository;

storing at least one usage right specification linked with the digital document;

requesting access to the digital document from a document platform;

determining whether the request is granted based on the usage right specification, the determining step including authenticating the document platform and determining whether the usage right specification includes a manner of use that allows transfer of the digital document to the document platform,

wherein the digital document comprises plural parts of digital content, and

the at least one usage right specification includes plural usage rights respectively linked with each of the plural parts of content;

when the usage right allows the transfer of the digital document to the document platform, transferring the part of the digital document to the document platform; and

rendering the part of the digital document by the document platform based on the usage rights.

19. A method as recited in claim 18, wherein the step of storing comprises storing at least one usage right specification in the document repository.

20. A method as recited in claim 18, wherein the step of storing comprises storing at least one usage right specification in a device separate from the document repository.

21. A method as recited in claim 18, wherein the at least on usage right specification specifies a type of use of the digital document and a quantity of use of the digital document.

22. A method as recited in claim 18, wherein at least one part of the content and at least one usage right specification are included in different files.

23. A method as recited in claim 18, wherein at least one part of the content and at least one usage right specification are stored in the same file.

24. A method as recited in claim 18, wherein at least a portion of the digital content is a software program.

25. A method as recited in claim 18, wherein at least one usage right specification comprises a revenue identifier for identifying a revenue owner of the digital content.

26. The method as recited in claim 18, wherein at least one usage right specification also specifies one or more conditions which must be satisfied before the manner of rendering is exercised.

27. A method as recited in claim 26, wherein at least one condition includes determining the presence of a digital ticket.

28. A method as recited in claim 18, wherein at least one of the usage rights or a part of the content are stored on a removable storage device.

29. A method as recited in claim 18, wherein at least one part of the content and at least one usage right specification are stored on the same device.

30. The method as recited in claim 18, wherein at least one of the content and at least one usage right specification are stored on different devices.

31. A method as recited in claim 18, wherein the method is implemented with a computer system including one or more hardware and/or software components.

32. A method as recited in claim 18, wherein the method is implemented via one or more computer readable instructions embedded on a computer readable medium and configured to cause one or more computer processors to perform the steps of the method.

33. A method for securely rendering digital documents, comprising:

receiving a request to transfer a digital document from a document repository to a document plafform the digital document having at least one usage right specification linked therewith,

wherein the digital document comprises plural parts of digital content, and

the at least one usage right specification includes plural usage rights respectively linked with each of the plural parts of content;

authenticating the document platform by accessing at least one identifier linked with the document platform or with a user of the document platform and determining whether the identifier is linked with at least one of a document platform and user authorized to use the digital document;

when the authenticating step is successful, determining whether a request for at least one part of the digital document to be transferred and stored on a document platform based on a manner of use included in the at least one usage right is allowed;

when the at least one usage right specification allows at least a part of the digital document to be transferred to a document platform, transferring the part of the digital document to the document platform; and

rendering the part of the digital document by the document platform based on the usage rights.

34. A method as recited in claim 33, wherein the step of storing comprises storing at least one usage right specification on the document platform.

35. A method as recited in claim 33, wherein the step of storing comprises storing at least one usage right specification on a device separate from the document platform.

36. A method as recited in claim 33, wherein the at least on usage right specification specifies a type of use of the digital document and a quantity of use of the digital document.

37. A method as recited in claim 33, wherein at least one part of the content and at least one usage right specification are included in different files.

38. A method as recited in claim 33, wherein at least one part of the content and at least one usage right specification are stored in the same file.

39. A method as recited in claim 33, wherein at least a portion of the digital content is a software program.

40. A method as recited in claim 33, wherein at least one usage right specification comprises a revenue identifier for identifying a revenue owner of the digital content.

41. The method as recited in claim 33, wherein at least one usage right specification also specifies one or more conditions which must be satisfied before the manner of rendering may be exercised.

42. A method as recited in claim 41, wherein at least one condition includes determining the presence of a digital ticket.

43. A method as recited in claim 33, wherein at least one of the usage rights or a part of the content are stored on a removable storage device.

44. A method as recited in claim 33, wherein at least one part of the content and at least one usage right specification are stored on the same device.

45. The method as recited in claim 33, wherein at least one of the content and at least one usage right specification are stored on different devices.

46. A method as recited in claim 33, wherein the method is implemented with a computer system including one or more hardware and/or software components.

47. A method as recited in claim 33, wherein the method is implemented via one or more computer readable instructions embedded on a computer readable medium and configured to cause one or more computer processors to perform the steps of the method.