Digital rights management of streaming contents and services

• US 8,661,255 B2
• Filed: 12/06/2011
• Issued: 02/25/2014
• Est. Priority Date: 12/06/2011
• Status: Active Grant

• Current Assignee: Sony Interactive Entertainment LLC (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Network Entertainment International LLC (Sony Group Corp.)
• Inventors: Pedlow, Leo, Xiong, True, Holcomb, Eric, Fielder, Kathy
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US13/312,184
• Publication Number:
  US 20130145161A1
• Time in Patent Office: 812 Days
• Field of Search: 713/168, 713/189, 726/7
• US Class Current: 713/168
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 65/612 for unicast

Abstract

Managing digital rights of contents and services streamed to a client device, including: receiving and validating a certificate from the client device; enabling the client device to log into and communicate with a server using a secure protocol to establish a private relationship between the client device and the server; and transmitting a resource identifier to the client device using the secure protocol when the private relationship is established.

Claims

1. A method of managing digital rights of contents and services streamed to a client device, the method comprising:

receiving and validating a certificate from the client device;

enabling the client device to log into and communicate with a server using a secure protocol to establish a private relationship between the client device and the server;

transmitting a resource identifier to the client device using the secure protocol when the private relationship is established;

receiving an encryption key from a service provider;

generating a hash value and a private key associated with the encryption key;

encrypting the resource identifier using the encryption key and the hash value; and

encrypting the hash value using the private key.

2. The method of claim 1, further comprising

transmitting the encryption key and the private key to the client device along with the resource identifier.

3. The method of claim 1, further comprising:

receiving an updated encryption key from the service provider;

generating an updated hash value and an updated private key associated with the updated encryption key; and

hashing and encrypting the resource identifier using the updated encryption key and the updated private key.

4. A digital rights management system for streaming contents and services to a client device, the system comprising:

a registration unit configured to receive a certificate from the client device,

wherein the registration unit enables the client device to log into and communicate with a server using a secure protocol when the certificate is validated, and

wherein the validation of the certificate establishes a private relationship between the client device and the server; and

an interface unit configured to transmit a resource identifier to the client device using the secure protocol when the private relationship is established,

wherein the private relationship is used to periodically refresh the resource identifier to prevent unauthorized access to the contents and services.

5. The system of claim 4, wherein the contents and services are streamed to the client device located in at least one of home, concert venue, sporting event, movie, and conference.

6. The system of claim 4, wherein the resource identifier identifies resources residing on the server.

7. The system of claim 4, wherein the certificate from the client device comprises

at least one of a registered television identifier, a server-specific certificate, a user token, and a secure protocol.

8. The system of claim 4, wherein the resource identifier is encrypted using an encryption key and a hash value, and the hash value is encrypted using a private key.

9. The system of claim 8, wherein the interface unit further returns the encryption key and the private key to the client device.

10. A non-transitory computer storage medium storing a computer program to manage digital rights of contents and services streamed to a client device, the computer program comprising executable instructions that cause a computer to:

receive and validate a certificate from the client device;

enable the client device to log into and communicate with a server using a secure protocol to establish a private relationship between the client device and the server; and

transmit a resource identifier to the client device using the secure protocol when the private relationship is established,

wherein the private relationship is used to periodically refresh the resource identifier to prevent unauthorized access to the contents and services.

11. The non-transitory computer storage medium of claim 10, further comprising executable instructions that cause a computer to:

receive a request from the client device for streaming of the contents and services referenced by the resource identifier; and

stream the contents and services stored in a location identified by the resource identifier.

12. The non-transitory computer storage medium of claim 10, further comprising executable instructions that cause a computer to:

receive an encryption key from a service provider;

generate a hash value and a private key associated with the encryption key;

encrypt the resource identifier using the encryption key and the hash value; and

encrypt the hash value using the private key.

13. The non-transitory computer storage medium of claim 12, further comprising executable instructions that cause a computer to

transmit the encryption key and the private key to the client device along with the resource identifier.

14. The non-transitory computer storage medium of claim 12, further comprising executable instructions that cause a computer to:

receive an updated encryption key from the service provider;

generate an updated hash value and an updated private key associated with the updated encryption key;

hash and encrypt the resource identifier using the updated encryption key and the updated private key; and

transmit the encryption key and the private key to the client device along with the resource identifier.

15. The non-transitory computer storage medium of claim 10, further comprising executable instructions that cause the computer to

configure the resource identifier as an expirable resource identifier which becomes invalid after a configurable period of time.

16. The non-transitory computer storage medium of claim 15, wherein the expirable resource identifier uses encryption and hash key to prevent the unauthorized access.