Embedded content requests in a rights locker system for digital content access control

• US 8,230,518 B2
• Filed: 02/09/2011
• Issued: 07/24/2012
• Est. Priority Date: 09/13/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Oracle America, Inc. (Oracle Corporation)
• Inventors: de Jong, Eduard K.
• Primary Examiner(s): PHAM, LUU T
• Application Number:
  US12/931,800
• Publication Number:
  US 20110138484A1
• Time in Patent Office: 531 Days
• Field of Search: None
• US Class Current: 726/29
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

Access to digital content may be controlled by determining a digital content specification and associated authenticated rights locker access request, sending the authenticated rights locker access request and the digital content specification, and receiving a new authenticated rights locker access request and a Web page with clickable links in response to the sending, where at least one of the clickable links is associated with an authenticated digital content request. When an indication of a user selection of one of the clickable links is received, an authenticated digital content request associated with the user-selected clickable link is sent to a digital content repository. The digital content is received in response to the sending of the authenticated digital content request.

Claims

1. A method for digital content access control, comprising:

providing access by a user device to a rights locker provider for a rights locker, wherein said user device includes a token for use in creating authenticated rights locker access requests;

determining, on said user device,

a digital content specification associated with a digital content stored on a digital content repository, and

an associated authenticated rights locker access request, which is associated with said digital content specification, wherein said associated authenticated rights locker access request was previously authenticated by said rights locker provider for the rights locker;

sending, from said user device to said rights locker provider for the rights locker, said authenticated rights locker access request and said digital content specification;

receiving, on said user device, from said rights locker provider, in response to said sending, and based on a status of said token

a new authenticated rights locker access request, that replaces the authenticated rights locker access request, wherein said new authenticated rights locker access request is embedded in a Web cookie, and

a Web page with that includes one or more clickable links in response to said sending,

wherein at least one of said one or more clickable links is associated with an authenticated digital content request;

storing at least part of said new authenticated rights locker access request on said user device;

receiving, on said user device, an indication of a user selection of said one or more clickable links associated with the authenticated digital content request;

sending, from said user device, the authenticated digital content request associated with said one or more clickable links to the digital content repository; and

receiving, on said user device from said digital content repository, in response to sending said authenticated digital content request, said digital content.

2. The method of claim 1 wherein said method further comprises determining, on said user device, one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending said authenticated rights locker access request and said digital content specification further comprises sending said one or more delivery parameters.

3. The method of claim 1, further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

4. The method of claim 1 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol (HTTP) Response message.

5. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

providing access by a user device to a rights locker provider for a rights locker, wherein said user device includes a token for use in creating authenticated rights locker access requests;

determining, on said user device,

a digital content specification associated with a digital content stored on a digital content repository, and

an associated authenticated rights locker access request, which is associated with said digital content specification, wherein said associated authenticated rights locker access request was previously authenticated by said rights locker provider for the rights locker;

sending, from said user device to said rights locker provider for the rights locker, said authenticated rights locker access request and said digital content specification;

receiving, on said user device, from said rights locker provider, in response to said sending, and based on a status of said token

a new authenticated rights locker access request, that replaces the authenticated rights locker access request, wherein said new authenticated rights locker access request is embedded in a Web cookie, and

a Web page with that includes one or more clickable links in response to said sending,

wherein at least one of said one or more clickable links is associated with an authenticated digital content request;

storing at least part of said new authenticated rights locker access request on said user device;

receiving, on said user device, an indication of a user selection of said one or more clickable links associated with the authenticated digital content request;

sending, from said user device, the authenticated digital content request associated with said one or more clickable links to the digital content repository; and

receiving, on said user device from said digital content repository, in response to sending said authenticated digital content request, said digital content.

6. The program storage device of claim 5 wherein said method further comprises determining, on said user device, one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending said authenticated rights locker access request and said digital content specification further comprises sending said one or more delivery parameters.

7. The program storage device of claim 5, said method further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

8. The program storage device of claim 5 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol (HTTP) Response message.

9. An apparatus for digital content access control, comprising:

a digital content repository for storing a plurality of digital contents, and

an interface that provides access by a user device to a rights locker provider for a rights locker, wherein said user device includes a token for use in creating authenticated rights locker access requests; and

a processor configured to;

determine, on said user device,

a digital content specification associated with a digital content stored on the digital content repository, and

an associated authenticated rights locker access request, which is associated with said digital content specification, wherein said associated authenticated rights locker access request was previously authenticated by said rights locker provider for the rights locker;

send, from said user device to said rights locker provider for the rights locker, said authenticated rights locker access request and said digital content specification;

receive, on said user device, from said rights locker provider, in response to said sending, and based on a status of said token

a new authenticated rights locker access request, that replaces the authenticated rights locker access request, wherein said new authenticated rights locker access request is embedded in a Web cookie, and

a Web page with that includes one or more clickable links in response to said sending,

wherein at least one of said one or more clickable links is associated with an authenticated digital content request;

store at least part of said new authenticated rights locker access request;

receive, on said user device, an indication of a user selection of said one or more clickable links associated with the authenticated digital content request;

send, from said user device, the authenticated digital content request associated with said one or more clickable links to the digital content repository; and

receive, on said user device from said digital content repository, in response to sending said authenticated digital content request, said digital content.

10. The apparatus of claim 9 wherein said processor is further configured to:

determine, on said user device, one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both; and

said sending said authenticated rights locker access request and said digital content specification further comprises sending said one or more delivery parameters.

11. The apparatus of claim 9 wherein said apparatus comprises a smart card.

12. The apparatus of claim 11 wherein said smart card comprises a Java Card™

technology-enabled smart card.

13. The apparatus of claim 11 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

14. The apparatus of claim 11 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

15. The apparatus of claim 9 wherein said processor is further configured to store at least part of said new authenticated rights locker access request in a bookmark on said user device.

16. The apparatus of claim 9 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol (HTTP) Response message.