Extensible rights expression processing system

• US 7,974,923 B2
• Filed: 11/18/2002
• Issued: 07/05/2011
• Est. Priority Date: 11/20/2001
• Status: Active Grant

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Tran, Duc, Chancellor, Robert, DeMartini, Thomas, Fung, Joseph Zhung Yee, Tieu, Vincent Hsiang, Valenzuela, Edgardo, Ta, Thanh, Nguyen, Mai
• Primary Examiner(s): Hewitt, II; Calvin Loyd
• Assistant Examiner(s): SHERR, CRISTINA O
• Application Number:
  US10/298,220
• Publication Number:
  US 20030144869A1
• Time in Patent Office: 3,151 Days
• Field of Search: 705 50- 59, 395/157, 395/164, 395/188, 395/200, 395/186, 395/218, 235/380, 380/4
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 50/188 Electronic negotiation

Abstract

Extensible grammar-based rights expression system for processing rights expressions including an interpreter with plug-in subcomponents, a validator, and a framework. In another embodiment, system includes a framework having an extensible architecture with extensibility points for adding extensions to the grammar, and an interpreter, the extensions defining semantics and syntax of new rights expressions. A method for processing rights expressions is also provided having the steps of registering plug-in components, making a programmatic call, finding and invoking appropriate plug-in components, evaluating the request against the grant, and returning an authorization result. In another embodiment, method includes the steps of providing an extensible grammar-based rights expression system having an extensible architecture with an interpreter, evaluating the request against the grant using the interpreter, and returning an authorization result. The method may include the step of adding new extensions to the rights expression system to allow processing of new rights expressions.

Claims

1. An extensible grammar-based rights expression system for processing a plurality of extensible rights expressions, said system comprising:

at least one extensible interpreter configured to evaluate said plurality of extensible rights expressions;

at least one extensible validator configured to validate compliance with respective conditions set forth in said plurality of rights expressions upon authorization by said interpreter; and

an extensible framework configured to provide an interface between said at least one interpreter and said at least one validator, said framework comprising means for registering configuration information of plural interpreters and plural validators and means for invoking an appropriate interpreter and an appropriate validator based on a programmatic call from an application and the registered configuration information.

2. The system of claim 1, wherein said rights expressions include a grant that includes a usage right associated with a resource and a principal to whom said usage right is granted.

3. The system of claim 2, wherein said rights expressions include a request that includes a usage right associated with a resource and a principal requesting use of said resource.

4. The system of claim 3, wherein said interpreter is configured to evaluate said request based on said grant, and at least one of:

authorize said request if said requested usage right is issued in said grant;

conditionally authorize said request if said requested usage right is issued with one or more condition set forth in said grant; and

not authorize said request if said requested usage right is not issued in said grant.

5. The system of claim 4, wherein said request is conditionally authorized so that said usage right requested in said request is authorized contingent on one or more condition set forth in said grant.

6. The system of claim 5, wherein one of said validator validates compliance with said one or more condition set forth in said grant.

7. The system of claim 3, wherein said interpreter is configured to evaluate said rights expressions based on said request and said grant.

8. The system of claim 7, wherein said rights expressions are evaluated by said interpreter by comparing said usage right, said resource, and said principal included in said request with said usage right, said resource, and said principal included in said grant.

9. The system of claim 8, wherein said interpreter is configured to at least one of:

authorize said request if said usage right, said resource, and said principal of said request and said grant match one another;

conditionally authorize said request if said usage right, said resource, and said principal of said request and said grant match one another, and said grant further includes one or more conditions; and

not authorize said request if said usage right, said resource, and said principal of said request and said grant do not match one another.

10. The system of claim 2, wherein said interpreter is configured to evaluate said grant by at least one of decrypting said grant, verifying a digital signature, and authenticating an issuer of said grant.

11. The system of claim 3, wherein said interpreter is configured to evaluate said request by at least one of authenticating said principal, and verifying said resource.

12. The system of claim 1, further comprising an application that interfaces with said framework to provide said rights expressions to said interpreter.

13. The system of claim 12, wherein said application is at least one of a creator, a distributor, and a consumer of said rights expressions.

14. The system of claim 12, wherein said application is at least one of a rights authoring system configured to author digital content, and a rendering system configured to render digital content.

15. The system of claim 1, further comprising a parser configured to manipulate said rights expressions.

16. The system of claim 15, wherein said parser is further configured to facilitate processing of new rights expressions.

17. The system of claim 15, wherein said parser interfaces with said framework to provide said manipulated rights expressions to said interpreter.

18. The system of claim 1, wherein said interpreter is configured to be expanded by adding additional plug-in subcomponents thereto.

19. The system of claim 18, wherein said additional plug-in subcomponents are configured to allow evaluation of new rights expressions.

20. The system of claim 18, further comprising additional validators configured to validate compliance with conditions set forth in said new rights expressions.

21. The system of claim 1, further comprising additional validators configured to validate compliance with conditions set forth in new rights expressions.

22. The system of claim 1, wherein the framework is configured to register the interpreter and the validators into the framework, identify the interpreter and the validators corresponding to the rights expressions that the interpreter and the validators can process, look up the identified interpreter and validators, and invoke the identified interpreter and validators.

23. The system of claim 1, wherein said system is implemented with one or more hardware and software components.

24. A method for processing rights expressions used in an extensible grammar-based rights expression system, said method comprising:

registering configuration information of plural interpreters and plural validators with a framework;

invoking an appropriate interpreter and an appropriate validator based on a programmatic call from an application and the registered configuration information;

evaluating, via the invoked interpreter, said rights expression; and

validating, via the invoked validator, compliance with respective conditions set forth in said rights expression upon authorization by said interpreter.

25. The method of claim 24, wherein said rights expressions include a grant that includes a usage right associated with a resource and a principal to whom said usage right is granted.

26. The method of claim 25, wherein said rights expressions include a request that includes a usage right associated with a resource and a principal requesting use of said resource.

27. The method of claim 26, wherein said interpreter is configured to evaluate said request based on said grant, and at least one of:

authorize said request if said requested usage right is issued in said grant;

conditionally authorize said request if said requested usage right is issued with one or more condition set forth in said grant; and

not authorize said request if said requested usage right is not issued in said grant.

28. The method of claim 27, wherein said request is conditionally authorized so that said usage right requested in said request is authorized contingent on one or more condition set forth in said grant.

29. The method of claim 28, further comprising validating, via said invoked validator, compliance with said one or more condition set forth in said grant.

30. The method of claim 26, further comprising evaluating, via said invoked interpreter, said rights expressions based on said request and said grant.

31. The method of claim 30, further comprising evaluating, via said invoked interpreter, said rights expressions by comparing said usage right, said resource, and said principal included in said request with said usage right, said resource, and said principal included in said grant.

32. The method of claim 31, further comprising, via said invoked interpreter, at least one of:

authorizing said request if said usage right, said resource, and said principal of said request and said grant match one another;

conditionally authorizing said request if said usage right, said resource, and said principal of said request and said grant match one another, and said grant further includes one or more conditions; and

not authorizing said request if said usage right, said resource, and said principal of said request and said grant do not match one another.

33. The method of claim 25, further comprising evaluating, via said invoked interpreter, said grant by at least one of decrypting said grant, verifying a digital signature, and authenticating an issuer of said grant.

34. The method of claim 26, further comprising evaluating, via said invoked interpreter, said request by at least one of authenticating said principal, and verifying said resource.

35. The method of claim 24, further comprising interfacing an application with said framework to provide said rights expressions to said interpreter.

36. The method of claim 35, wherein said application is at least one of a creator, a distributor, and a consumer of said rights expressions.

37. The method of claim 35, wherein said application is at least one of a rights authoring system configured to author digital content, and a rendering system configured to render digital content.

38. The method of claim 24, further comprising manipulating, via a parser, said rights expressions.

39. The method of claim 38, further comprising facilitating processing, via said parser, of new rights expressions.

40. The method of claim 38, further comprising interfacing said parser with said framework to provide said manipulated rights expressions to said interpreter.

41. The method of claim 24, further comprising expanding said interpreter by adding additional plug-in subcomponents thereto.

42. The method of claim 41, further comprising evaluating, via said additional plug-in subcomponents, new rights expressions.

43. The method of claim 41, further comprising validating, via additional validators, compliance with conditions set forth in said new rights expressions.

44. The method of claim 24, further comprising validating, via additional validators, compliance with conditions set forth in new rights expressions.

45. The method of claim 24, further comprising, via the framework:

registering the interpreter and the validators into the framework;

identifying the interpreter and the validators corresponding to the rights expressions that the interpreter and the validators can process;

looking up the identified interpreter and validators,

invoking the identified interpreter and validators.

46. The method of claim 24, wherein the method is implemented with one or more hardware and software components.

47. The method of claim 24, wherein the method is implemented with one or more computer readable instructions embedded on a computer readable medium and configured to cause one or more computer processors to perform the steps of the method.