Generic digital rights management framework, and applications thereof

• US 8,752,191 B2
• Filed: 05/15/2008
• Issued: 06/10/2014
• Est. Priority Date: 05/16/2007
• Status: Active Grant

• Current Assignee: Avago Technologies International Sales Pte Limited (Broadcom, Inc.)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Krig, Scott
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Nobahar, Abdulhakim
• Application Number:
  US12/121,636
• Publication Number:
  US 20090083429A1
• Time in Patent Office: 2,217 Days
• Field of Search: 726/26, 726/27, 726/29, 709/200, 709201-203, 709217-219, 709223-232
• US Class Current: 726/27
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B

Abstract

Methods, systems and computer program products to implement generic Digital Rights Management (DRM) are provided herein. The methods include opening a session between an initiator and a responder, exchanging one or more of device and system information and sending one of an operation or event based on DRM capabilities, DRM partner, DRM authority, DRM characteristics, DRM Trust and CCEVS profiles. The operation includes one or more of a dataset, response code, operation parameter and response parameter. These extensions may be in the form of one or more of an operation, an event, a dataset or property code.

Claims

1. A method to exchange data on capabilities of a Digital Rights Management (DRM) system between an initiator and a responder operating under a data transfer protocol, comprising:

opening a session between the initiator and the responder;

sending an operation from the initiator to the responder requesting capabilities of a DRM system deployed on the responder; and

receiving, from the responder, in response to the operation, a dataset with the capabilities of the DRM system deployed on the responder, wherein the dataset indicates whether the DRM system deployed on the responder has a secure path for playing media content.

2. The method of claim 1, wherein the data transfer protocol is one of a Media Transport Protocol (MTP) or a Picture Transfer Protocol (PTP).

3. The method of claim 1, wherein the dataset includes one or more of a DRM system identification, a DRM capability vendor, a DRM capability version, DRM capability features, DRM capability permissions and a DRM capability status.

4. The method of claim 1, wherein the dataset indicates whether the DRM system deployed on the responder is enabled to play media content.

5. The method of claim 4, wherein the media content includes at least one of a video, a resolution of the video, audio, e-books, images, and slides.

6. The method of claim 1, wherein the dataset indicates whether the DRM system deployed on the responder is allowed to render media content.

7. The method of claim 6, wherein the media content includes at least one of a video, a resolution of the video, audio, e-books, images, and slides.

8. The method of claim 1, further comprising:

exchanging one or more of device and system information between the initiator and the responder.

9. The method of claim 1, wherein said operation includes one or more of a second dataset, a response code, an operation parameter, and a response parameter.

10. A method to exchange data on capabilities of multiple Digital Rights Management (DRM) systems between an initiator and a responder operating under a data transfer protocol, comprising:

opening a session between the initiator and the responder;

sending an operation from the initiator to the responder requesting capabilities of multiple DRM systems deployed on the responder;

receiving, from the responder, in response to the operation, a dataset with a list of the capabilities of the multiple DRM systems deployed on the responder, wherein the dataset indicates whether the DRM systems deployed on the responder have a secure path for playing media content.

11. The method of claim 10 wherein the list includes capabilities of each of the multiple DRM systems deployed on the responder.

12. The method of claim 10, wherein the data transfer protocol is one of a Media Transport Protocol (MTP) or a Picture Transfer Protocol (PTP).

13. The method of claim 10, wherein the list includes one or more DRM system capability datasets.

14. The method of claim 13, wherein each of the DRM system capability datasets includes one or more of a DRM system identification, a DRM capability vendor, a DRM capability version, DRM capability features, DRM capability permissions and a DRM capability status.

15. The method of claim 10, further comprising:

exchanging one or more of device and system information between the initiator and the responder.

16. The method of claim 10, wherein said operation includes one or more of a second dataset, a response code, an operation parameter, and a response parameter.

17. A method to exchange information on devices that share a Digital Rights Management (DRM) system between a first device and a second device operating under a data transfer protocol, comprising:

opening a session between the first device and the second device;

sending an operation from the first device to the second device requesting a list of devices that operate under a management of a common DRM management entity that supports DRM content sharing between the devices; and

receiving, from the second device, in response to the operation, a dataset including the list of devices that operate under the management of the common DRM management entity;

wherein the common DRM management entity resisters, authenticates, and manages each device'"'"'s capability to share DRM protected content between the devices.

18. The method of claim 17, wherein the devices are computational devices in a home or office network and share the DRM system.

19. The method of claim 17, wherein the data transfer protocol is one of a Media Transport Protocol (MTP) or a Picture Transfer Protocol (PTP).

20. The method of claim 17, wherein the dataset includes one or more of a partner link type, a partner link address, a partner alias name, a partner device type and partner sharing rights.

21. The method of claim 17, further comprising:

exchanging one or more of device and system information between the initiator and the responder.

22. The method of claim 17, wherein said operation includes one or more of a second dataset, a response code, an operation parameter, and a response parameter.

23. A method to exchange Digital Rights Management (DRM) authority characteristics between an initiator and a responder operating under a data transfer protocol, comprising:

opening a session between the initiator and the responder;

sending an operation from the initiator to the responder requesting data on a DRM authority that registers, authenticates, and manages a capability of DRM partner devices to share DRM protected content between the DRM partner devices; and

receiving, from the responder, in response to the operation, a DRM system identification and a dataset including characteristics of the DRM authority that indicate the capability of the DRM partner devices to share the DRM protected content between the DRM partner devices.

24. The method of claim 23, wherein the data transfer protocol is one of a Media Transport Protocol (MTP) or a Picture Transfer Protocol (PTP).

25. The method of claim 23, wherein the dataset includes one or more of an authority link type, an authority link address, an authority alias name, an authority device type and authority rights granted.

26. The method of claim 23, further comprising:

exchanging one or more of device and system information between the initiator and the responder.

27. The method of claim 23, wherein said operation includes one or more of a second dataset, a response code, an operation parameter, and a response parameter.

28. A method to exchange Digital Rights Management (DRM) security level information between an initiator and a responder operating under a data transfer protocol, comprising:

opening a session between the initiator and the responder;

sending an operation from the initiator to the responder requesting data on DRM security level information; and

receiving, from the responder, in response to the operation, a dataset including data on DRM security level information of a DRM system implemented on the responder.

29. The method of claim 28, wherein the data transfer protocol is one of a Media Transport Protocol (MTP) or a Picture Transfer Protocol (PTP).

30. The method of claim 28, wherein the dataset includes one or more of secure boot data, trusted clock data, device class data, cryptography hardware capabilities, secure components data, orange book level, device public key data, trusted authority address data and device address data.

31. A method to exchange Common Criteria Evaluation and Validation Scheme (CCEVS) data between an initiator and a responder operating under a data transfer protocol, comprising:

opening a session between the initiator and the responder;

sending an operation from the initiator to the responder requesting CCEVS data for a CCEVS system deployed on the responder; and

receiving, from the responder, in response to the operation, a dataset with the CCEVS data for the CCEVS system deployed on the responder and whether a Digital Rights Management (DRM) system deployed on the responder is allowed to render media content.

32. The method of claim 31, wherein the data transfer protocol is one of a Media Transport Protocol (MTP) or a Picture Transfer Protocol (PTP).

33. The method of claim 31, wherein the dataset includes one or more of a technology type, a profile name, a conformance claim, a protection profile version, an abbreviation sponsor and dates.

34. The method of claim 31, further comprising:

exchanging one or more of device and system information between the initiator and the responder.

35. The method of claim 31, wherein said operation includes one or more of a second dataset, a response code, an operation parameter, and a response parameter.

36. A method to exchange data on multiple Common Criteria Evaluation and Validation Scheme (CCEVS) systems between an initiator and a responder operating under a data transfer protocol, comprising:

opening a session between the initiator and the responder;

sending an operation from the initiator to the responder requesting a list of multiple CCEVS systems deployed on the responder; and

receiving, from the responder, in response to the operation, a dataset with the list of the multiple CCEVS systems deployed on the responder and whether a Digital Rights Management (DRM) system deployed on the responder is allowed to render media content.

37. The method of claim 36, wherein, the list includes datasets for each of the multiple CCEVS systems deployed on a responder.

38. The method of claim 36, wherein the data transfer protocol is one of a Media Transport Protocol (MTP) or a Picture Transfer Protocol (PTP).

39. The method of claim 36, wherein the list includes CCEVS protection profiles for each CCEVS system deployed on the responder.

40. The method of claim 39, wherein each of the CCEVS protection profiles includes one or more of a technology type, a profile name, a conformance claim, a protection profile version, an abbreviation sponsor and dates.