File system operation and digital rights management (DRM)

• US 8,640,256 B2
• Filed: 01/17/2012
• Issued: 01/28/2014
• Est. Priority Date: 01/17/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Cross, David B., Leach, Paul J.
• Primary Examiner(s): Davis, Zachary A
• Application Number:
  US13/352,038
• Publication Number:
  US 20120117662A1
• Time in Patent Office: 742 Days
• Field of Search: 726 27- 31, 713/165, 705/51, 705/57, 705/59
• US Class Current: 726/28
• CPC Class Codes: G06F 16/10 File systems; File servers

Abstract

A file system is configured for use with files protected by digital rights management (DRM) content controls and to interact both with applications that are, and are not, DRM aware. The file system may be configured for use by two applications, in a manner that may provide the second application with protected files if the first application was previously allowed access. In one example, a user context cache of DRM-protected files is created. The files in the cache may have been decrypted in response to a request(s) from the first application. Subsequent requests from the second application may be received for files within the user context cache of DRM-protected files. At least one of the files within the user context cache of DRM-protected files may be provided to the second application if the second application has a joint user context with the first application.

Claims

1. A system for file operations and digital rights management (DRM), the system comprising:

memory;

one or more processors;

a first application stored in the memory and executable by the one or more processors to request one or more files that are protected by at least one DRM content control;

a second application stored in the memory and executable by the one or more processors to request the one or more files that are protected by the at least one DRM content control; and

one or more file system components stored in the memory and executable by the one or more processors to respond to requests from the first and second applications for the one or more files, the one or more file system components configured to cause files of the one or more files with no complex DRM content controls to be decrypted and to provide the decrypted files to the first and second applications, the one or more file system components configured to create an identity-context-based cache of DRM-protected files so that a file that has been decrypted on behalf of and provided to the first application may be provided to the second application in response to determining that the first and second applications each correspond to a joint user context.

2. The system of claim 1, wherein the first and second applications are not DRM-aware.

3. The system of claim 1, wherein the first and second applications are not adapted for complex DRM content controls.

4. The system of claim 1, wherein the one or more file system components are further executable by the one or more processors to provide DRM-controlled content to non-DRM aware applications and to distinguish complex DRM controls from simple DRM controls of the one or more files.

5. The system of claim 1, wherein the one or more file system components are further executable by the one or more processors to provide:

DRM-controlled content to DRM aware applications in response to determining that complex DRM controls are associated with the one or more files; and

decrypted content to non-DRM aware applications in response to determining that simple DRM controls are associated with the one or more files and user access is verified.

6. The system of claim 1, wherein decrypting the one or more files with no complex DRM content controls is based at least in part on determining user access rights, the user access rights including rights of a human user or rights of the first or second applications.

7. The system of claim 1, wherein the one or more files are examined to distinguish non-DRM protection from DRM controls, and wherein the DRM controls are examined to distinguish complex DRM controls from simple DRM controls.

8. A method comprising:

receiving a request, from a first application, to create one or more files in a file system defined in a system memory that are protected by at least one digital rights management (DRM) content control;

determining, by one or more processors, whether at least one file of the one or more files lacks complex DRM content controls;

decrypting the at least one file in response to determining that the at least one file lacks complex DRM content controls;

maintaining a user context cache for validating a user of the first application and obtaining licenses for DRM-controlled content on behalf of the user;

receiving a second request to open the at least one file from a second application, the second application being validated by the user context cache; and

opening the at least one file associated with the second request, if indicated by the user context cache.

9. The method of claim 8, wherein the first and second applications are not adapted for complex DRM content controls.

10. The method of claim 8, wherein the file system is configured to provide DRM-controlled content to non-DRM aware applications and to distinguish complex and simple DRM controls of the one or more files.

11. The method of claim 8, wherein the file system is configured to provide DRM-controlled content to DRM aware applications in response to determining that complex DRM controls are associated with the one or more files and to provide decrypted content to non-DRM aware applications in response to determining that simple DRM controls are associated with the one or more files and user access to the one or more files is verified.

12. The method of claim 8, wherein decrypting files with no complex DRM content controls is based at least in part on determining user access rights, the user access rights including rights of a human user or rights of the first or second applications.

13. The method of claim 8, wherein the one or more files are examined to distinguish non-DRM protection from DRM controls, and wherein the DRM controls are examined to distinguish complex DRM controls from simple DRM controls.

14. The method of claim 8, further comprising:

performing a validation of the first application in response to determining that the one or more files have complex DRM content controls.

15. A computer readable memory, defining computer-executable instructions, the instructions configured to provide digital rights management (DRM) and comprising instructions for:

upon receiving a first request from a first application, creating one or more files within a file system, the one or more files having protection of at least one DRM content control;

distinguishing, within the at least one DRM content control, DRM content controls that are complex from those that are not complex;

validating the first application as a trusted DRM application in response to determining that the one or more files have DRM content controls that are complex;

maintaining a user context cache for validating a user of the first application and providing decrypted files to a second application indicated by the user context cache;

receiving a second request from the second application regarding at least one file, the second request being validated by the user context cache; and

saving the at least one file, if indicated by the validation.

16. The computer readable memory of claim 15, additionally comprising instructions for retrieving a user license from a server in response to determining that the one or more files are not protected by complex DRM.

17. The computer readable memory of claim 15, wherein instructions for maintaining the user context cache comprise instructions for:

obtaining licenses for DRM-controlled content; and

allowing access to one or more users according to the obtained licenses.

18. The computer readable memory of claim 15, wherein the file system is configured to provide DRM-controlled content to non-DRM aware applications and to distinguish complex DRM controls from simple DRM controls within the one or more files.

19. The computer readable memory of claim 15, wherein the file system is configured to provide DRM-controlled content to DRM aware applications in response to determining that complex DRM controls are associated with the one or more files and to provide decrypted content to non-DRM aware applications in response to determining that simple DRM controls are associated with the one or more files and user access is verified.

20. The computer readable memory of claim 15, wherein the one or more files are examined to distinguish non-DRM protection from DRM controls, and wherein DRM controls are examined to distinguish complex DRM controls from simple DRM controls.