Authenticating licenses for legally-protectable content based on license profiles and content identifiers

• US 8,700,533 B2
• Filed: 12/04/2003
• Issued: 04/15/2014
• Est. Priority Date: 12/04/2003
• Status: Active Grant

• Current Assignee: Software Integrity Group Incorporated
• Original Assignee: Black Duck Software, Inc. (Synopsys Incorporated)
• Inventors: Levin, Douglas Andrew, Shah, Ashesh C., Pedersen, Palle Martin
• Primary Examiner(s): KIM, STEVEN S
• Application Number:
  US10/728,173
• Publication Number:
  US 20050125358A1
• Time in Patent Office: 3,785 Days
• Field of Search: 705/59, 726/2, 726/26, 713/155, 717/177
• US Class Current: 705/59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 50/18 Legal services

Abstract

The disclosed technology can mitigate the risk of infringing a content owner'"'"'s rights in legally-protectable content by operating as a trusted, third-party license authority between content owners and content users to ensure that a license governing at least some aspects of the protectable content is authentic and thus validly represents the restrictions imposed by content owners pertaining to the use, distribution, modification, combination, interaction, and/or other manipulation of such content. An identifier representative of the protectable content together with a profile of the license (which may include attributes that specify particular restrictions, uses, and interactions pertaining to the protectable content) can serve as a basis for determining the authenticity of the license associated with the protectable content. The protectable content can correspond to one or more multimedia presentations, video segments, audio segments, textual representations, works of art, visual representations, technological know-how, business know-how, contract rights, and/or software elements.

Claims

1. A method for facilitating deployment of aggregated protectable content in an environment comprising:

receiving, by a license authority device, a registration request message including at least a content ID, a license profile, and an owner ID from a content owner device;

accessing, by the license authority device, the content ID, the license profile, and the owner ID from the received registration message;

identifying, by the license authority device, an algorithm type used in forming the content ID;

computing, by the license authority device, a license identifier of an aggregated protectable content based on the content ID, the license profile, the owner ID, and the algorithm type;

storing, by the license authority device, the identified algorithm type, the computed license identifier, the content ID, the license profile, and the owner ID in one or more repositories;

transmitting, by the license authority device, the computed license identifier to the content owner device;

receiving, by the license authority device, a request message comprising a second license identifier from a content user device;

retrieving, by the license authority device, the computed license identifier from the one or more repositories;

comparing, by the license authority device, the second license identifier with the retrieved computed license identifier; and

providing, by the license authority device, an authenticity information of the second license identifier to the content user device based on the step of comparing.

2. The method of claim 1, wherein the aggregated protectable content is compliant with an open source definition.

3. The method of claim 1, wherein the algorithm type is a hash algorithm.

4. The method of claim 1, wherein the license identifier is associated with at least one restriction value that specifies particular restrictions of the aggregated protectable content.

5. The method of claim 4, wherein the at least one restriction value corresponds to at least one of a prohibition, a requirement, and a nullity.

6. The method of claim 4, wherein the at least one restriction value includes at least one of values including true, false, required, don'"'"'t care, forbidden, 1, 0, −

1, and text.

7. The method of claim 1, wherein the license identifier is associated with at least one use value that specifies a permissible degree of distribution of the aggregated protectable content.

8. The method of claim 7, wherein the at least one use value corresponds to at least one of an acquisition, a personal use, a research use, an organizational use, a limited distribution, and an unlimited distribution of the aggregated protectable content.

9. The method of claim 1, wherein the license identifier is associated with at least one interaction value that specifies a permissible degree of manipulation of the aggregated protectable content.

10. The method of claim 9, wherein the at least one interaction value corresponds to at least one of an original element, a modified element, a group of distinct elements, a group of interconnected elements, a group of elements capable of providing a desired functionality, a plurality of interoperable groups of elements capable of providing a plurality of functions, an unrestricted manipulation of elements, and an unrestricted ownership of elements of at least one aspect of the protectable content.

11. The method of claim 1, wherein the license authority device is an independent third party entity device.

12. The method of claim 1, further comprising determining a risk measure indicating a level of confidence that the license profile is authentic.

13. The method of claim 12, wherein the risk measure comprises one of high risk, moderate risk, and low risk.

14. A system for facilitating deployment of aggregated protectable content, the system comprising:

one or more processors; and

memory storing computer executable instructions that, when executed by the one or more processors, cause the one or more processors to perform the operation of;

receiving a registration request message including at least a content ID, a license profile, and an owner ID from a content owner device;

accessing the content ID, the license profile, and the owner ID from the received registration message;

identifying an algorithm type used in forming the content ID;

computing a license identifier of an aggregated protectable content based on the content ID, the license profile, the owner ID, and the algorithm type;

storing the identified algorithm type, the computed license identifier, the content ID, the license profile, and the owner ID in one or more repositories;

transmitting the computed license identifier to the content owner device;

receiving a request message comprising a second license identifier from a content user device;

retrieving the computed license identifier from the one or more repositories;

comparing the second license identifier with the retrieved computed license identifier; and

providing an authenticity information of the second license identifier to the content user device based on the comparison.

15. The system of claim 14, wherein the aggregated protectable content is compliant with an open source definition.

16. The system of claim 14, wherein the license identifier is associated with at least one restriction value that specifies particular restrictions of the aggregated protectable content.

17. The system of claim 16, wherein the at least one restriction value corresponds to at least one of a prohibition, a requirement, and a nullity.

18. The system of claim 14, wherein the license identifier is associated with at least one use value that specifies a permissible degree of distribution of the aggregated protectable content.

19. The system of claim 18, wherein the at least one use value corresponds to at least one of an acquisition, a personal use, a research use, an organizational use, a limited distribution, and an unlimited distribution of the aggregated protectable content.

20. The system of claim 14, wherein the license identifier is associated with at least one interaction value that specifies a permissible degree of manipulation of the aggregated protectable content, wherein the at least one interaction value corresponds to at least one of an original element, a modified element, a group of distinct elements, a group of interconnected elements, a group of elements capable of providing a desired functionality, a plurality of interoperable groups of elements capable of providing a plurality of functions, an unrestricted manipulation of elements, and an unrestricted ownership of elements of at least one aspect of the protectable content.