Organization-based content rights management and systems, structures, and methods therefor

• US 7,469,050 B2
• Filed: 08/01/2003
• Issued: 12/23/2008
• Est. Priority Date: 06/27/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Brown, Kevin, Gerhard, Lutz, Antonoff, Lauren, Cahill, Jason, Walker, Mark, Kouznetsov, Pavel, Lutz, Moshe Randall
• Primary Examiner(s): Nalven; Andrew L
• Application Number:
  US10/632,356
• Publication Number:
  US 20050005166A1
• Time in Patent Office: 1,971 Days
• Field of Search: 705/51, 380/284, 726/27, 726/28, 726/29, 726/30
• US Class Current: 380/284
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

A document store delivers a document requested therefrom from a folder having rights information associated therewith. In response to a request for a copy of the document, rights data for the copy of the document is defined based on the rights information of the folder, and the copy of the document and the defined rights data thereof are published to result in a package with the rights data and the copy of the document encrypted according to a content key (KD) to result in (KD(copy)). The formed package is then delivered to the requester. The rights data can be discovered upon the requester attempting to render the package and such discovery triggers a request for a corresponding license based on such rights data. The license includes (KD) therein in a form available to the requester to decrypt (KD(copy)) if the requester satisfies the rights data.

Claims

1. A method for a document store to deliver a copy of a document requested therefrom, the document being stored in a folder of the document store, the folder having rights information associated therewith, the method comprising:

receiving the document into the folder;

receiving a request for the copy of the document;

dynamically defining rights data for the copy of the document using the rights information of the folder that received the document, wherein the rights data accompanies the copy of the document as part of a package;

publishing the copy of the document and the rights data thereof to result in the package with the rights data and the copy of the document encrypted according to a content key; and

delivering the formed package to the requester, whereby the rights data is discovered upon the requester attempting to render the package and such discovery triggers a request for a corresponding license based on the rights data of the copy of the document, the license including the content key therein in a form available to the requester to decrypt the copy of the encrypted document if the requester satisfies the rights data.

2. The method of claim 1 further comprising obtaining the license on behalf of the requester and delivering the obtained license to the requester with the package.

3. The method of claim 1 wherein publishing comprises

generating the content key;

encrypting the copy of the document with the content key to form the copy of the encrypted document;

protecting the copy of the encrypted document by encrypting the content key with a public key of a rights management server, whereby only the rights management server with a corresponding private key can apply same to the encrypted content key to reveal the content key; and

attaching the rights data with the encrypted content key therein to the copy of the encrypted document to form the package.

4. The method of claim 3 further comprising having the rights data signed by one of the rights management server or the document store.

5. The method of claim 3 comprising concatenating the rights data with the encrypted content key therein to the copy of the encrypted document to form the package.

6. The method of claim 1 wherein the folder has rights information comprising access controls associated therewith, the access controls being defined for each individual and/or for each group of individuals that may access the folder, and wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the copy of the document.

7. The method of claim 6 wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the requester and also for all other individuals or groups of individuals specified in the access controls, whereby the copy of the document with the rights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

8. The method of claim 1 wherein the folder has rights information comprising a rights template associated therewith, the rights template defining rights for a number of individuals and/or groups of individuals, and wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the copy of the document.

9. The method of claim 8 wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the requester and also for all other individuals or groups of individuals specified in the rights template, whereby the copy of the document with the fights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

10. The method of claim 8 comprising copying all of the rights template into the rights data for the copy of the document.

11. The method of claim 8 comprising copying a portion of the rights template relevant to the document into the rights data for the copy of the document.

12. The method of claim 1 comprising receiving the document into the folder in a non-rights-management-protected form, whereby rights management protection is applied to the copy of the document when the copy of the document is delivered to the requester.

13. A computer-readable medium having stored thereon computer-executable instructions for performing a method for a document store to deliver a copy of a document requested therefrom, the document being stored in a folder of the document store ,the folder having rights information associated therewith, the method comprising:

receiving the document into the folder;

receiving a request for the copy of the document;

dynamically defining rights data for the copy of the document using the rights information of the folder that received the document, wherein the rights data accompanies the copy of the document as part of a package;

publishing the copy of the document and the rights data thereof to result in a the package with the rights data and the copy of the document encrypted according to a content key; and

delivering the formed package to the requester, whereby the rights data is discovered upon the requester attempting to render the package and such discovery triggers a request for a corresponding license based on the rights data of the copy of the document, the license including the content key therein in a form available to the requester to decrypt the copy of the encrypted document if the requester satisfies the rights data.

14. The medium of claim 13 wherein the method further comprises obtaining the license on behalf of the requester and delivering the obtained license to the requester with the package.

15. The medium of claim 13 wherein publishing comprises:

generating the content key;

encrypting the copy of the document with the content key to form the copy of the encrypted document;

protecting the copy of the encrypted document by encrypting the content key with a public key of a rights management server, whereby only the rights management server with a corresponding private key can apply same to the encrypted content key to reveal the content key; and

attaching the rights data with the encrypted content key therein to the copy of the encrypted document to form the package.

16. The medium of claim 15 wherein the method further comprises having the rights data signed by one of the rights management server or the document store.

17. The medium of claim 15 wherein the method comprises concatenating the rights data with the encrypted content key therein to the copy of the encrypted document to form the package.

18. The medium of claim 13 wherein the folder has rights information comprising access controls associated therewith, the access controls being defined for each individual and/or for each group of individuals that may access the folder, and wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the copy of the document.

19. The medium of claim 18 wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the requester and also for all other individuals or groups of individuals specified in the access controls, whereby the copy of the document with the rights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

20. The medium of claim 13 wherein the folder has rights information comprising a rights template associated therewith, the rights template defining rights for a number of individuals and/or groups of individuals, and wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the copy of the document.

21. The medium of claim 20 wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the requester and also for all other individuals or groups of individuals specified in the rights template, whereby the copy of the document with the rights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

22. The medium of claim 20 wherein the method comprises copying all of the rights template into the rights data for the copy of the document.

23. The medium of claim 20 wherein the method comprises copying a portion of the rights template relevant to the document into the rights data for the copy of the document.

24. The medium of claim 13 comprising receiving the document into the folder in a non-rights-management-protected-form, whereby rights management protection is applied to the copy of the document when the copy of the document is delivered to the requester.