Method and system for device registration within a digital rights management framework

• US 7,620,809 B2
• Filed: 04/15/2005
• Issued: 11/17/2009
• Est. Priority Date: 04/15/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Prologo, Richard D., Strom, Clifford P., Evans, Brian P., Oliveira, Eduardo P., Cutter, Benjamin Brooks, Paka, Anand D.
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): BAYOU, YONAS A
• Application Number:
  US11/107,513
• Publication Number:
  US 20060236097A1
• Time in Patent Office: 1,677 Days
• Field of Search: 713/156
• US Class Current: 713/156
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method of registering network devices in a digital rights management system (DRMS) includes receiving a digital certificate transmitted by the network device requesting registration and verifying the validity of the certificate. The DRMS may then send cryptographic information to the applying network device. The network device may be authorized for registration via a user interface to the DRMS. The DRMS may conduct a proximity test to determine of the network device is proximate to the DRMS. If the certificate is validated, authorization is received, and the proximity test indicates that the network device is proximate to the DRMS, the network device may be registered. A registered network device is then authorized to play protected digital content.

Claims

1. A method of registering a network device in a digital rights management system (DRMS) connected to a network, the method comprising:

receiving at the DRMS a digital certificate from a first network device;

determining a validity of the digital certificate;

requesting and receiving an authorization from a user interface to register the first network device;

determining if a location of the first network device is proximate to a location of the DRMS; and

registering the first network device if the first network device location is proximate to the DRMS location, wherein upon being registered the first network device becomes eligible to play protected digital content.

2. The method of claim 1, further comprising:

denying registration of the first network device upon any one of a failure to validate the certificate, a failure to authorize registration, and a failure to verify proximity to the DRMS.

3. The method of claim 1, wherein determining the validity of the certificate comprises a verification that the digital certificate matches a root digital certificate of trust generated by a manufacturing authority.

4. The method of claim 1, wherein determining the validity of the certificate comprises a verification that the digital certificate has not been revoked.

5. The method of claim 1, further comprising:

sending to the first network device cryptographic information comprising a cryptographic seed.

6. The method of claim 1, wherein requesting and receiving authorization from a user interface to register the first network device comprises:

generating a request to register the first network device, the request being displayed via the user interface; and

receiving an indication of authorization via the user interface.

7. The method of claim 1, wherein determining if the first network device location is proximate to the DRMS location comprises:

transmitting a request for information to the first network device over the network;

receiving a response to the request from the first network device;

determining a delay time for the response; and

determining if the delay time indicates if the network device location is proximate to the DRMS location.

8. The method of claim 1, further comprising:

using the first network device to receive and play protected digital content.

9. The method of claim 1, further comprising:

registering additional network devices, each device having a verified certificate, authorization to register and proximity to the DRMS;

using up to N of the registered network devices to play digital content transferred from the DRMS to the respective registered network device; and

denying one of transfer and play of digital content to an N+1 registered device, wherein the DRMS permits only N registered device to concurrently play digital content.

10. A computer system having a digital rights management system (DRMS), the system comprising:

a DRMS connected to a network;

a plurality of network devices, each network device connected to the network and each device having a digital certificate;

a user interface connected to the DRMS; and

a processor having access to memory, the memory having instructions which when executed, perform a method comprising;

receiving at the DRMS the digital certificate from each network device requesting registration;

determining the validity of each certificate;

generating a request to register each device, each request being displayed on the user interface;

receiving an indication of authorization for registration via the user interface;

determining if each location of each network device is proximate to a location of the DRMS; and

registering each network device that has a verified digital certificate, is authorized, and is proximate to the DRMS location, wherein upon being registered each registered network device becomes eligible to play protected digital content and wherein a limit is imposed on one or both of a number of registered network devices and a number of registered network devices permitted to concurrently access the protected digital content.

11. The system of claim 10, further comprising:

denying registration of a network device upon any one of a failure to validate its certificate, a failure to authorize its registration, and a failure to verify its proximity to the DRMS location.

12. The system of claim 10, wherein the step of determining the validity of each certificate comprises a verification that the digital certificate matches a root digital certificate of trust generated by a manufacturing authority.

13. The system of claim 10, further comprising:

sending to each network device cryptographic information comprising a cryptographic seed.

14. The system of claim 10, further comprising:

periodically re-validating the registration of each registered network device.

15. The system of claim 10, wherein determining if each location of each network device is proximate to a location of the DRMS comprises:

transmitting a request for information to each network device over the network;

receiving a response to the request from each network device;

determining a delay time for each response; and

determining if each delay time indicates if each network device is proximate to the DRMS.

16. The system of claim 10, further comprising:

using each network device to receive and play protected digital content without exceeding the imposed limit.