Trusted information exchange based on trust agreements

• US 8,682,795 B2
• Filed: 09/07/2006
• Issued: 03/25/2014
• Est. Priority Date: 09/16/2005
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Lenkov, Dmitry, Hood, Douglas, Vissapragada, Rama, Scardina, Mark V.
• Primary Examiner(s): Augustin, Evens J
• Application Number:
  US11/518,481
• Publication Number:
  US 20070067630A1
• Time in Patent Office: 2,756 Days
• Field of Search: 705 50- 79
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Techniques are provided for allowing organizations to preserve the trust and allow this trust to be propagated across multiple agencies and/or enterprises. A technology is provided that allows (mutually) trusted entities to share content (information, digital assets) over any protocol-based network such as the Internet based on granted rights and agreed conditions. In one embodiment, Trusted Information Exchange (TIE) systems have a Service Oriented Architecture (SOA) and use content (information, asset) repositories to store and forward content to trusted entities on the Internet. Techniques are provided to permit source TIE systems to manage the specific disposition and management of their assets to receiving TIE systems through directions conveyed in licenses that reflect apriori agreements.

Claims

1. A method of exchanging digital information, comprising:

sending over a network system, from a first system controlled by a first party, to a second system controlled by a second party, a subscription agreement that is digitally signed by the first party and includes a digital identity of the second party;

wherein the subscription agreement defines characteristics of digital assets that are covered by the subscription agreement;

wherein the subscription agreement licenses the second party to perform a set of operations relative to digital assets that have said characteristics;

receiving at the first system, from the second system, a subscription agreement confirmation that is digitally signed by the second party;

after receiving the subscription agreement confirmation, the first system identifying a digital asset that has said characteristics;

prior to providing the digital asset to the second system, sending from the first system to the second system a trust agreement that is digitally signed by the first party and includes the digital identity of the second party;

wherein the trust agreement licenses the second party to perform said set of operations relative to said digital asset;

receiving at the first system, from the second system, a trust agreement confirmation that is digitally signed by the second party;

after the trust agreement confirmation is received by the first system, the first system providing the digital asset to the second system; and

wherein the method is performed by one or more machines programmed to be special purpose machines pursuant to instructions from program software.

2. The method of claim 1 wherein the subscription license includes an embedded license that specifies all terms of the asset license.

3. A non-transitory computer-readable storage medium storing one or more sequences of instructions which, when executed by one or more processors, causes:

sending over a network system, from a first system controlled by a first party, to a second system controlled by a second party, a subscription agreement that is digitally signed by the first party and includes a digital identity of the second party;

wherein the subscription agreement defines characteristics of digital assets that are covered by the subscription agreement;

wherein the subscription agreement licenses the second party to perform a set of operations relative to digital assets that have said characteristics;

receiving at the first system, from the second system, a subscription agreement confirmation that is digitally signed by the second party;

after receiving the subscription agreement confirmation, the first system identifying a digital asset that has said characteristics;

prior to providing the digital asset to the second system, sending from the first system to the second system a trust agreement that is digitally signed by the first party and includes the digital identity of the second party;

wherein the trust agreement licenses the second party to perform said set of operations relative to said digital asset;

receiving at the first system, from the second system, a trust agreement confirmation that is digitally signed by the second party;

after the trust agreement confirmation is received by the first system, the first system providing the digital asset to the second system; and

wherein the method is performed by one or more machines programmed to be special purpose machines pursuant to instructions from program software.

4. The non-transitory computer-readable storage medium as recited in claim 3, wherein the subscription license includes an embedded license that specifies all terms of the asset license.