Issuing a publisher use license off-line in a digital rights management (DRM) system

• US 8,719,171 B2
• Filed: 07/08/2010
• Issued: 05/06/2014
• Est. Priority Date: 02/25/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bourne, Steve, Dillaway, Blair Brewster, Jacomet, Pierre, Malaviarachchi, Rushmi U., Parambir, Kumar B., Rozenfeld, Yevgeniy Eugene, Venkatesh, Chandramouli, Rose, Charles F.
• Primary Examiner(s): Ravetti, Dante
• Application Number:
  US12/832,831
• Publication Number:
  US 20100281253A1
• Time in Patent Office: 1,398 Days
• Field of Search: 705/59, 705/16, 705/21, 705/71, 380/44, 380/262, 380/278, 380/279
• US Class Current: 705/59
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A publishing user publishes digital content and issues to itself a corresponding digital publisher license to allow itself to render the published digital content. The publishing user is supplied with a publishing certificate from a digital rights management (DRM) server, where the publishing certificate allows the publishing user to so publish the digital content and to so issue the publisher license.

Claims

1. A method for acquiring an off-line publishing (OLP) certificate by a first computing device, the OLP certificate issued by a server enrolled in a Digital Rights Management (DRM) system, the method comprising:

requesting, by the first computing device, an OLP certificate from the enrolled server having an enrollment certificate, wherein the enrollment certificate comprises a public key of the enrolled server (PU-DRM) and revocation information;

receiving the OLP certificate from the enrolled server, wherein the OLP certificate comprises a public key (PU-OLP) and a private key (PR-OLP), and wherein the OLP certificate is signed with a private key of the enrolled server (PR-DRM);

encrypting content according to a content key (CK), wherein the content comprises one or more of;

audio, video, text, data, and multimedia;

encrypting the content key with the public key of the enrolled server (PU-DRM);

generating rights data defining rules for rendering the encrypted content;

signing the rights data and the encrypted content key with the private key (PR-OLP);

concatenating the signed rights data and the encrypted content key to the encrypted content;

forwarding, by the first computing device without contacting the enrolled server, the encrypted content concatenated with the signed rights data and the encrypted content key to a second computing device; and

issuing, by the first computing device without contacting the enrolled server, a use license for accessing the encrypted content by the first computing device, wherein the use license is signed with the private key (PR-OLP).

2. The method as defined in claim 1, further comprising decrypting the encrypted content key using a private key of a publishing user (PR-ENTITY) to obtain a decrypted content key.

3. The method as defined in claim 2, further comprising decrypting the encrypted content using the decrypted content key.

4. The method as defined in claim 1, wherein the revocation information comprises a listing of revoking entities able to revoke authority of the enrolled server to provide DRM services.

5. The method as defined in claim 1, wherein the private key (PR-OLP) of the OLP certificate is encrypted with the public key of a publishing user (PU-ENTITY).

6. The method as defined in claim 1, wherein the enrollment certificate comprises a time-range wherein the enrolled server is authorized to provide DRM services.

7. The method as defined in claim 1, wherein the use license is based on the signed rights data published by the first computing device.