Revocation of a certificate and exclusion of other principals in a digital rights management (DRM) system based on a revocation list from a delegated revocation authority
First Claim
1. A computer-readable storage medium having instructions stored thereon that, when executed by a processor, perform a method of using a single digital certificate for authenticating a corresponding element in a digital rights management (DRM) system, the single certificate issued by an issuer for being verified by a trusted component of a user computing device to authenticate the element prior to access of digital content, the verification including ensuring that the single certificate is not revoked, the single certificate comprising:
- an identification of at least two entities as having delegated authority over the single certificate to revoke same as delegated by the issuer, the issuer and the at least two entities being separate entities, the at least two entities being delegated revocation authorities, the delegated revocation authorities revoking the single certificate by identifying same in a separate revocation list for each of the delegated revocation authorities, locations of respective revocation lists internal to the single certificate; and
at least one revocation condition internal to the single certificate relating to possible revocation of the single certificate, each revocation condition having to be satisfied when the single certificate is employed to authenticate the element of the digital rights management system, wherein upon authentication of the corresponding element, access to the digital content is granted to the user computing device.
2 Assignments
0 Petitions
Accused Products
Abstract
A digital certificate identifies an entity as having authority over the certificate to revoke same as delegated by the issuer. The certificate also has at least one revocation condition relating to possible revocation of the certificate. To authenticate the certificate, the identification of the delegated revocation authority, a location from which a revocation list is to be obtained, and any freshness requirement to be applied to the revocation list are determined from the certificate. It is then ensured that the revocation list from the location is present and that the present revocation list satisfies the freshness requirement, that the revocation list is promulgated by the delegated revocation authority identified in the certificate, and that the certificate is not identified in the revocation list as being revoked.
-
Citations
20 Claims
-
1. A computer-readable storage medium having instructions stored thereon that, when executed by a processor, perform a method of using a single digital certificate for authenticating a corresponding element in a digital rights management (DRM) system, the single certificate issued by an issuer for being verified by a trusted component of a user computing device to authenticate the element prior to access of digital content, the verification including ensuring that the single certificate is not revoked, the single certificate comprising:
-
an identification of at least two entities as having delegated authority over the single certificate to revoke same as delegated by the issuer, the issuer and the at least two entities being separate entities, the at least two entities being delegated revocation authorities, the delegated revocation authorities revoking the single certificate by identifying same in a separate revocation list for each of the delegated revocation authorities, locations of respective revocation lists internal to the single certificate; and at least one revocation condition internal to the single certificate relating to possible revocation of the single certificate, each revocation condition having to be satisfied when the single certificate is employed to authenticate the element of the digital rights management system, wherein upon authentication of the corresponding element, access to the digital content is granted to the user computing device. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A method for authenticating a single digital certificate in a digital rights management (DRM) system for a corresponding element on a user computing device, the single certificate being issued by an issuer for being authenticated by a trusted component of the user computing device to authenticate the element prior to access to digital content, the method comprising:
-
determining from the single certificate an identification of at least two entities as having delegated authority over the single certificate to revoke same as delegated by the issuer, the issuer and the at least two entities being separate entities, the at least two entities being delegated revocation authorities, the delegated revocation authorities revoking the single certificate by identifying same in a separate revocation list for each of the delegated revocation authorities; determining from the single certificate a location from which the revocation lists are to be obtained, the location of each of the revocation lists internal to the single certificate; determining from the single certificate a freshness requirement to be applied to the revocation lists, the freshness requirement internal to the single certificate; ensuring that the revocation lists from each of the locations is present and that the present revocation lists satisfy the freshness requirement; ensuring that the present revocations lists promulgated by the delegated revocation authorities identified in the single certificate; and ensuring that the single certificate is not identified in the present revocation lists as being revoked, wherein upon authenticating the single digital certificate in the DRM system, access to the digital content is granted to the user computing device. - View Dependent Claims (13, 14, 15, 16, 17, 18, 19, 20)
-
Specification