Method and system for managing rights in digital information over a network

• US 7,986,782 B2
• Filed: 11/23/2005
• Issued: 07/26/2011
• Est. Priority Date: 09/12/2000
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Meyers, Stephan
• Primary Examiner(s): Lipman; Jacob
• Assistant Examiner(s): Tran; Tongoc
• Application Number:
  US11/286,024
• Publication Number:
  US 20060078112A1
• Time in Patent Office: 2,071 Days
• Field of Search: 380/201, 380/202, 380/210, 380/212, 713/165, 713/189, 705/51, 705/57, 705/59
• US Class Current: 380/201
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/418 External card to be used in combination with the client device, e.g. for conditional access
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A method and system for distributing digital information is disclosed. Preferably, a user acquires a tangible object which contain a code authorizing access to the digital information. The user reads the tangible object through a reader, which sends the code to a server on which the digital information is stored. The server then authorizes access to the digital information to one or more access devices listed in registries belonging to the user. The user may use the digital information on the terms he agrees to, and, while in use by the user, access to the digital information to other users or other playback devices is disabled. Once the user no longer is using the digital information, the access device erases the digital information, and signals the server that the digital information is no longer in use, thereby re-enabling access to the digital information by the other playback devices listed in the registry.

Claims

1. A method comprising:

determining to register a first access device as being authorized to receive a digital object including digital information, the first access device being associated with a common user account;

receiving a first request to grant access to the digital object to the first access device after registering the digital object;

determining to transmit, in response to the first request, the digital object to the first access device;

determining to register the digital object as being in use by the first access device;

receiving a second request to grant access to the digital object to a second access device, wherein the second access device is registered as being authorized to receive the digital object, the second access device being associated with the common user account; and

determining to deny, in response to the second request, transmission of the digital object to the second access device while the digital object is in use by the first access device.

2. The method of claim 1, further comprising:

determining to register a plurality of access devices as being authorized to receive the digital object, the plurality of access devices having common rights to access the digital object;

wherein registering said digital object as being in use by said first access device grants access to said digital object to the plurality of access devices having common access rights.

3. The method of claim 2, wherein said plurality of access devices includes access devices of different types, and said digital object is transmitted to each of said types of access device in a form specific to each of said types of access device.

4. The method of claim 2, wherein said plurality of access devices includes access devices of different types, and said digital object is transmitted to each of said types of access device with a content specific to each of said types of access device.

5. The method of claim 1, further comprising:

determining to identify said digital object with a unique identifying code, said unique identifying code being contained in a physical object.

6. The method of claim 5, wherein said physical object includes either a magnetic memory, a bar code, an optical memory or an RF tag.

7. The method of claim 1, wherein determining to transmit the digital object to said access device includes transmitting the digital object over a computer network.

8. The method of claim 7, wherein said computer network includes the internet.

9. The method of claim 5, wherein the first access device is configured to read said physical object and access said unique identifying code, and receiving the first request includes reading said physical object.

10. The method of claim 2, further comprising:

determining to establish an encryption protocol for transmitting the digital information in the digital object to one or more registries of the plurality of access devices;

determining to encrypt the digital information in accordance with the encryption protocol;

determining to transmit the digital information to at least one of the plurality of access devices having common access rights to the digital object in encrypted form.

11. The method of claim 1, further comprising:

determining to disable an access code shared by the first and second access devices upon transmitting the digital object to the first access device such that a request to access the digital object received from the second access device while the access code is disabled is denied, wherein the access code authorizes access to the digital object and the request includes the access code.

12. The method of claim 11, further comprising:

determining that the digital object has been removed from the first access device; and

determining to enable, in response to determining that the digital object has been removed from the first access device, the access code such that a request to access the digital object received from the second access device while the access code is enabled is granted, wherein the request includes the access code.

13. The method of claim 1, further comprising:

receiving a request to access the digital object from a third access device different from the first and second access devices, wherein the first and second access devices share a first access code authorizing access to the digital object and the third access device is associated with a unique identifying code, different from the first access code, authorizing access to the digital object; and

determining to transmit, in response to the request, the digital object to the third access device while the digital object irrespective of whether the digital object is in-use by the first access device.

14. An apparatus comprising:

a processor; and

at least one memory including computer program instructions, the at least one memory and the computer program instructions configured to, with the processor, cause the apparatus to perform at least the following;

determine to register a first access device as being authorized to receive a digital object, the first access device being associated with a common user account;

receive a first request to grant access to the digital object to the first access device after registering the digital object;

determine to transmit, in response to the first request, the digital object to the first access device;

determine to register the digital object as being in use by the first access device;

receive a second request to grant access to the digital object to a second access device, wherein the second access device is registered as being authorized to receive the digital object, the second access device being associated with the common user account; and

determine to deny, in response to the second request, transmission of the digital object to the second access device while the digital object is in use by the first access device.

15. The apparatus of claim 14, wherein the apparatus is further caused to:

determine to disable an access code shared by the first and second access devices upon transmitting the digital object to the first access device such that a request to access the digital object received from the second access device while the access code is disabled is denied, the access code authorizes access to the digital object and wherein the request includes the access code.

16. The apparatus of claim 15, wherein the apparatus is further caused to:

determine that the digital object has been removed from the first access device; and

determine to enable, in response to determining that the digital object has been removed from the first access device, the access code such that a request to access the digital object received from the second access device while the access code is enabled is granted, wherein the request includes the access code.

17. The apparatus of claim 14, wherein the apparatus is further caused to:

determine to register a plurality of access devices as being authorized to receive the digital object, the plurality of access devices having common rights to access the digital object;

wherein registering said digital object as being in use by said first access device grants access to said digital object to the plurality of access devices having common access rights.

18. The apparatus of claim 17, wherein the apparatus is further caused to:

determine to establish an encryption protocol for transmitting the digital information in the digital object to the registry of access devices;

determine to encrypt the digital information in accordance with the encryption protocol;

determine to transmit the digital information to the at least one of the access devices having common access rights to the digital object in encrypted form.

19. A non-transitory computer-readable storage medium carrying one or more instructions which, when executed by a processor, cause an apparatus to at least perform the following steps:

determine to register a first access device as being authorized to receive a digital object including digital information, the first access device being associated with a common user account;

receive a first request to grant access to the digital object to the first access device after registering the digital object;

determine to transmit, in response to the first request, the digital object to the first access device;

determine to register the digital object as being in use by the first access device;

receive a second request to grant access to the digital object to a second access device, wherein the second access device is registered as being authorized to receive the digital object, the second access device being associated with the common user account; and

determine to deny, in response to the second request, transmission of the digital object to the second access device while the digital object is in use by the first access device.

20. The non-transitory computer-readable storage medium of claim 19, wherein the apparatus is further caused to:

receive a request to access the digital object from a third access device different from the first and second access devices, wherein the first and second access devices share a first access code authorizing access to the digital object and the third access device is associated with a second access code, different from the first access code, authorizing access to the digital object; and

determine to transmit, in response to the request, the digital object to the third access device while the digital object irrespective of whether the digital object is in-use by the first access device.

21. The non-transitory computer-readable storage medium of claim 19, wherein the apparatus is further caused to:

determine to disable an access code shared by the first and second access devices upon transmitting the digital object to the first access device such that a request to access the digital object received from the second access device while the access code is disabled is denied, the access code authorizes access to the digital object and wherein the request includes the access code.

22. The non-transitory computer-readable storage medium of claim 21, wherein the apparatus is further caused to:

determine that the digital object has been removed from the first access device; and

determine to enable, in response to determining that the digital object has been removed from the first access device, the access code such that a request to access the digital object received from the second access device while the access code is enabled is granted, wherein the request includes the access code.