Binding a digital license to a portable device or the like in a digital rights management (DRM) system and checking out/checking in the digital license to/from the portable device or the like

• US 7,716,745 B2
• Filed: 06/09/2008
• Issued: 05/11/2010
• Est. Priority Date: 03/27/1999
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Peinado, Marcus
• Primary Examiner(s): Lanier; Benjamin E
• Assistant Examiner(s): ZECHER, CORDELIA P K
• Application Number:
  US12/135,944
• Publication Number:
  US 20080244751A1
• Time in Patent Office: 701 Days
• Field of Search: 726/26, 726/5, 726/7, 726/9, 726 18- 20, 705/59, 380277-279, 713/170, 713/171
• US Class Current: 726/26
• CPC Class Codes: G06F 21/1088 by using transactions with atomicity, consistency, or isolation and durability [ACID] properties
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G07F 9/002 Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

To render digital content encrypted according to a content key (KD) on a first device having a public key (PU1) and a corresponding private key (PR1), a digital license corresponding to the content is obtained, where the digital license includes the content key (KD) therein in an encrypted form. The encrypted content key (KD) from the digital license is decrypted to produce the content key (KD), and the public key (PU1) of the first device is obtained therefrom. The content key (KD) is then encrypted according to the public key (PU1) of the first device (PU1 (KD)), and a sub-license corresponding to and based on the obtained license is composed, where the sub-license includes (PU1 (KD)). The composed sub-license is then transferred to the first device.

Claims

1. A system for checking out a sub-license to a first device from a second device and checking in a sublicense, comprising:

computing processors; and

computing memory communicatively coupled with said computing processors, said computing memory having instructions stored therein for performing the following;

receiving a request from the second device for a nonce, and providing such nonce;

receiving from the second device the checked-out sub-license and the provided nonce;

concluding that the nonce received is the same nonce provided;

therefore concluding that the received sub-license is legitimate;

storing the sent sub-license;

adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to a catalog;

deleting the checked-out sub-license;

requesting a nonce from the second device, and receiving such nonce; and

sending to the second device the received nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device,

wherein the deleted checked-out sub-license is not in the sent list, and

wherein the second device concludes that the nonce sent by the first device is the same nonce received by the first device, therefore concludes that the sent identifier and list that accompanied the sent nonce is legitimate, compares the sent list with the catalog and notes that the deleted checked-out sub-license is in the catalog but not on the sent list, and deletes the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

2. A system for checking out a sub-license from a second device to a first device and checking in the sublicense, comprising:

computing processors; and

computing memory communicatively coupled to said computing processors, the computing memory having stored therein instructions for performing the following;

requesting a nonce from the first device, and receiving such nonce; and

sending the checked-out sub-license and the received nonce to the first device, wherein the first device concludes that the nonce sent by the second device is the same nonce received by the second device, therefore concludes that the sent sub-license that accompanies the sent nonce is legitimate, and stores the sent sub-license;

adding the checked-out sub-license to a catalog;

wherein checking in the checked-out sub-license comprises;

receiving a request from the first device for a nonce, and providing such nonce;

receiving from the first device the provided nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device, wherein the deleted checked-out sub-license is not in the sent list;

concluding that the received nonce is the same nonce provided;

therefore concluding that the received identifier and list is legitimate;

comparing the received list with the catalog, and noting that the deleted checked-out sub-license is in the catalog but not on the sent list; and

deleting the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

3. The system of claim 2 wherein adding the checked-out sub-license to the catalog comprises adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to the catalog.

4. A system for checking out a sub-license from a second device to a first device and checking in the sub-license, comprising:

computing processors; and

computing memory communicatively coupled to said computing processors, the computing memory having stored therein instructions for performing the following;

requesting, by the second device, a nonce from the first device, and receiving such nonce;

sending, by the second device, the checked-out sub-license and the received nonce to the first device;

concluding, by the first device, that the nonce sent by the second device is the same nonce received by the second device;

therefore concluding, by the first device, that the sent sub-license that accompanies the sent nonce is legitimate; and

storing, by the first device, the sent sub-license;

adding, by the second device, the checked-out sub-license to a catalog;

deleting the checked-out sub-license from the first device;

requesting, by the first device, a nonce from the second device, and receiving such nonce;

sending, by the first device to the second device, the received nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device, wherein the deleted checked-out sub-license is not in the sent list;

concluding, by the second device, that the nonce sent by the first device is the same nonce received by the first device;

therefore concluding, by the second device, that the sent identifier and list that accompanied the sent nonce is legitimate;

comparing, by the second device, the sent list with the catalog, and noting that the deleted checked-out sub-license is in the catalog but not on the sent list; and

deleting, by the second device, the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

5. The system of claim 4 wherein adding the checked-out sub-license to the catalog comprises adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to the catalog.

6. A computer readable storage medium comprising computer readable instructions for performing a method of checking out a sub-license to a first device from a second device and checking in a sublicense, the method comprising:

receiving a request from the second device for a nonce, and providing such nonce;

receiving from the second device the checked-out sub-license and the provided nonce;

concluding that the nonce received is the same nonce provided;

therefore concluding that the received sub-license is legitimate;

storing the sent sub-license;

adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to a catalog;

deleting the checked-out sub-license;

requesting a nonce from the second device, and receiving such nonce; and

sending to the second device the received nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device,

wherein the deleted checked-out sub-license is not in the sent list, and

wherein the second device concludes that the nonce sent by the first device is the same nonce received by the first device, therefore concludes that the sent identifier and list that accompanied the sent nonce is legitimate, compares the sent list with the catalog and notes that the deleted checked-out sub-license is in the catalog but not on the sent list, and deletes the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

7. A computer readable storage medium comprising computer readable instructions for performing a method of checking out a sub-license from a second device to a first device and checking in the sublicense, the method comprising:

requesting a nonce from the first device, and receiving such nonce; and

sending the checked-out sub-license and the received nonce to the first device, wherein the first device concludes that the nonce sent by the second device is the same nonce received by the second device, therefore concludes that the sent sub-license that accompanies the sent nonce is legitimate, and stores the sent sub-license;

adding the checked-out sub-license to a catalog;

wherein checking in the checked-out sub-license comprises;

receiving a request from the first device for a nonce, and providing such nonce;

receiving from the first device the provided nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device, wherein the deleted checked-out sub-license is not in the sent list;

concluding that the received nonce is the same nonce provided;

therefore concluding that the received identifier and list is legitimate;

comparing the received list with the catalog, and noting that the deleted checked-out sub-license is in the catalog but not on the sent list; and

deleting the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

8. The computer readable storage medium of claim 7 wherein adding the checked-out sub-license to the catalog comprises adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to the catalog.

9. A computer readable storage medium comprising computer readable instructions for performing a method of checking out a sub-license from a second device to a first device and checking in the sub-license, the method comprising:

requesting, by the second device, a nonce from the first device, and receiving such nonce;

sending, by the second device, the checked-out sub-license and the received nonce to the first device;

concluding, by the first device, that the nonce sent by the second device is the same nonce received by the second device;

therefore concluding, by the first device, that the sent sub-license that accompanies the sent nonce is legitimate; and

storing, by the first device, the sent sub-license;

adding, by the second device, the checked-out sub-license to a catalog;

deleting the checked-out sub-license from the first device;

requesting, by the first device, a nonce from the second device, and receiving such nonce;

sending, by the first device to the second device, the received nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device, wherein the deleted checked-out sub-license is not in the sent list;

concluding, by the second device, that the nonce sent by the first device is the same nonce received by the first device;

therefore concluding, by the second device, that the sent identifier and list that accompanied the sent nonce is legitimate;

comparing, by the second device, the sent list with the catalog, and noting that the deleted checked-out sub-license is in the catalog but not on the sent list; and

deleting, by the second device, the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

10. The computer readable storage medium of claim 9 wherein adding the checked-out sub-license to the catalog comprises adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to the catalog.