Content management using multiple abstraction layers

• US 9,208,334 B2
• Filed: 10/25/2013
• Issued: 12/08/2015
• Est. Priority Date: 10/25/2013
• Status: Expired due to Fees

• Current Assignee: Verance Corporation
• Original Assignee: Verance Corporation
• Inventors: Zhao, Jian, Winograd, Joseph M.
• Primary Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US14/064,010
• Publication Number:
  US 20150121534A1
• Time in Patent Office: 774 Days
• Field of Search: 726/4, 726/6, 726/26, 726/27, 709/217, 709/226, 713/156, 713/168, 713/176, 380/201, 380/229, 380/233, 380/260
• US Class Current: 1/1
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management

Abstract

Systems, devices, methods and computer program products improve various aspects of a content management system. In one scenario, one or more contents are accessed at a content handling device. The content handling device is configured to operate using multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer. Content management operations are conducted on the one or more contents using at least two abstraction layers. Such content management operations include conducting watermark extraction and content screening operations at a first layer for a first watermark message having a first value, conducting watermark extraction and content screening operations at a second layer for a second watermark message having a second value, and initiating one or more enforcement actions corresponding to the first value and the second value based at least in-part on respective results of the content screening.

Claims

1. A method, comprising:

accessing one or more contents at a content handling device, the content handling device configured to operate using multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer, wherein the multiple abstraction layers are arranged in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, the content handling device configured to receive a first content and provide at least a portion of the first content to a first layer of the multiple abstraction layers, and receive a second content and provide at least a portion of the second content to a second layer of the multiple abstraction layers; and

conducting content management operations on the one or more contents using at least two of the multiple abstraction layers, wherein conducting the content management operations comprises;

conducting watermark extraction and content screening operations at the first layer for a first watermark message having a first value, the first value having an associated first usage rule or set of rules,

conducting watermark extraction and content screening operations at the second layer for a second watermark message having a second value, the second value having an associated second usage rule or set of rules different from the first usage rule or set of rules and wherein the first usage rule or set of rules correspond to a more restrictive enforcement action than an enforcement action corresponding to the second usage rule or set of rules, and

initiating one or more enforcement actions corresponding to the first value and the second value based at least in-part on respective results of the content screening for the first watermark message and the content screening for the second watermark message.

2. The method of claim 1, wherein the one or more enforcement actions corresponding to content screening results for one or both of the first or second values are applied at the application layer.

3. The method of claim 1, wherein each accessed content is provided to both the first and second layers.

4. The method of claim 1, wherein:

multiple contents are accessed by the content handling device;

the first content is provided to the first layer; and

the second content is provided to the second layer.

5. The method of claim 1, further comprising:

subsequent to initiating the one or more enforcement actions, receiving new usage rules associated with one or both of the first or the second values; and

triggering a new enforcement action based on the new usage rules.

6. The method of claim 1, wherein:

the watermark extraction and content screening operations for the first watermark message are conducted at the hardware layer; and

the watermark extraction and content screening operations for the second watermark message are conducted at the operating system layer.

7. The method of claim 6, wherein the first value indicates that any content use at a consumer device is prohibited.

8. The method of claim 1, wherein the multiple abstraction layers further include a cloud computing layer.

9. The method of claim 1, wherein the watermark extraction and content screening operations for one or both of the first or second watermark messages are triggered by a first application running at the application layer.

10. The method of claim 1, further comprising receiving semantic information related to the one or more contents at one or both of the first or the second layers prior to conducting the watermark extraction and content screening operations at one or both of the first or the second layers.

11. The method of claim 10, wherein the semantic information indicates one or more of the following:

encryption status of the one or more contents,

compression status of the one or more contents,

encoding format of the one or more content,

type of the one or more contents, or

source of the one or more contents.

12. The method of claim 1, wherein each of the watermark extraction and content screening operations at one or both of the first or second layers are conducted using respective software libraries that include program code stored on a tangible storage media, wherein the software libraries when linked to a software application program and executed by a microprocessor perform the watermark extraction and the content screening operations.

13. The method of claim 12, further comprising determining trustworthiness of the one or more software libraries based on a code signing technique.

14. The method of claim 12, further comprising determining trustworthiness of the one or more software libraries based on a shared secret between two or more abstraction layers.

15. The method of claim 12, wherein the software libraries are available to more than one application at the applications layer.

16. The method of claim 1, wherein each of the first and the second layers includes an interface that allows secure communication of watermark extraction or content screening results to another layer.

17. The method of claim 1, wherein the one or more enforcement actions include one or more of:

stoppage of playback of the one or more contents,

stoppage of recording of the one or more contents,

stoppage of transfer of the one or more contents,

muting an audio component of the one or more contents,

blanking a video portion of the one or more contents,

presenting a message on a screen of the content handling device, or

presenting an advertisement on a screen of the content handling device.

18. A device, comprising:

a processor; and

a memory comprising processor executable code, the processor executable code, when executed by the processor, configures the device to;

operate using multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer, wherein the multiple abstraction layers are arranged in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer,

access one or more contents including a first content and provide at least a portion of the first content to a first layer of the multiple abstraction layers, and a second content and provide at least a portion of the second content to a second layer of the multiple abstraction layers, and

conduct content management operations on the one or more contents using at least two of the multiple abstraction layers, wherein the content management operations comprise;

watermark extraction and content screening operations conducted at the first layer for a first watermark message having a first value, the first value having an associated first usage rule or set of rules,

watermark extraction and content screening operations conducted at the second layer for a second watermark message having a second value, the second value having an associated second usage rule or set of rules different from the first usage rule or set of rules and wherein the first usage rule or set of rules correspond to a more restrictive enforcement action than an enforcement action corresponding to the second usage rule or set of rules, and

initiation of one or more enforcement actions corresponding to the first value and the second value based at least in-part on respective results of the content screening for the first watermark message and the content screening for the second watermark message.

19. The device of claim 18, wherein the one or more enforcement actions corresponding to content screening results for one or both of the first or second values are applied at the application layer.

20. The device of claim 18, wherein the processor executable code, when executed by the processor, configures the device to provide each accessed content to both the first and second layers.

21. The device of claim 18, wherein the processor executable code, when executed by the processor, configures the device to:

access multiple contents;

provide the first content to the first layer; and

provide the second content to the second layer.

22. The device of claim 18, the processor executable code, when executed by the processor, further configures the device to:

subsequent to initiating the one or more enforcement actions, receive new usage rules associated with one or both of the first or the second values; and

trigger a new enforcement action based on the new usage rules.

23. The device of claim 18, wherein:

the watermark extraction and content screening operations for the first watermark message are conducted at the hardware layer; and

the watermark extraction and content screening operations for the second watermark message are conducted at the operating system layer.

24. The device of claim 23, wherein the first value indicates that any content use at a consumer device is prohibited.

25. The device of claim 18, wherein the multiple abstraction layers further include a cloud computing layer.

26. The device of claim 18, wherein the watermark extraction and content screening operations for one or both of the first or second watermark messages are triggered by a first application running at the application layer.

27. The device of claim 18, wherein the processor executable code, when executed by the processor, further configures the device to receive semantic information related to the one or more contents at one or both of the first or the second layers prior to conducting the watermark extraction and content screening operations at one or both of the first or the second layers.

28. The device of claim 27, wherein the semantic information indicates one or more of the following:

encryption status of the one or more contents,

compression status of the one or more contents,

encoding format of the one or more content,

type of the one or more contents, or

source of the one or more contents.

29. The device of claim 18, wherein the processor executable code, when executed by the processor, configures the device to conduct each of the watermark extraction and content screening operations at one or both of the first or the second layers using respective software libraries that include program code stored on a tangible storage media, wherein the software libraries when linked to a software application program and executed by the processor perform the watermark extraction and the content screening operations.

30. The device of claim 29, wherein one or more the software libraries are singed using a code signing technique to allow determination of trustworthiness of the one or more software libraries.

31. The device of claim 29, wherein the processor executable code, when executed by the processor, configures the device to determine trustworthiness of the one or more software libraries based on a shared secret between two or more abstraction layers.

32. The device of claim 29, wherein the software libraries are available to more than one application at the applications layer.

33. The device of claim 18, wherein each of the first and the second layers includes an interface that allows secure communication of watermark extraction or content screening results to another layer.

34. The device of claim 18, wherein the one or more enforcement actions include one or more of:

stoppage of playback of the one or more contents,

stoppage of recording of the one or more contents,

stoppage of transfer of the one or more contents,

muting an audio component of the one or more contents,

blanking a video portion of the one or more contents,

presenting a message on a screen of the content handling device, or

presenting an advertisement on a screen of the content handling device.

35. A computer program product, embodied on one or more non-transitory computer readable media, comprising:

program code for accessing one or more contents at a content handling device, the content handling device configured to operate using multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer, wherein the multiple abstraction layers are arranged in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, the content handling device configured to receive a first content and provide at least a portion of the first content to a first layer of the multiple abstraction layers, and receive a second content at provide at least a portion of the second content to a second layer of the multiple abstraction layers; and

program code for conducting content management operations on the one or more contents using at least two of the multiple abstraction layers, wherein conducting the content management operations comprises;

conducting watermark extraction and content screening operations at the first layer for a first watermark message having a first value, the first value having an associated first usage rule or set of rules,

conducting watermark extraction and content screening operations at the second layer for a second watermark message having a first value, the second value having an associated second usage rule or set of rules different from the first usage rule or set of rules and wherein the first usage rule or set of rules correspond to a more restrictive enforcement action than an enforcement action corresponding to the second usage rule or set of rules, and

initiating one or more enforcement actions corresponding to the first value and the second watermark value based at least in-part on respective results of the content screening for the first watermark message and the content screening for the second watermark message.

36. A method, comprising:

accessing a content at a content handling device, the content handling device configured to operate using multiple abstraction layers in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, each layer comprising an interface to allow communications between components operating within that layer and other layers of the multiple abstraction layers, the multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer; and

conducting content management operations using at least two of the multiple abstraction layers of the content handling device, the content management operations comprising;

receiving semantic information related to the content at a first layer, the semantic information indicative of at least a level trustworthiness of the content;

subsequent to receiving the semantic information, conducting watermark extraction operations at the first layer based at least in-part on the level of trustworthiness of the content determined from the received semantic information,

communicating watermark extraction results from the first layer to a second layer through a secure interface,

conducting content screening operations at the second layer based at least in-part on watermark extraction results, and

initiating an enforcement action based at least in-part on a result of the content screening in conformance with a use policy of the content.

37. The method of claim 36, wherein the semantic information indicates one or more of the following:

encryption status of the content,

compression status of the content,

encoding format of the content,

type of the content, or

source of the content.

43. The method of claim 36, wherein the watermark extraction results are communicated from the first layer to the second layer upon a determination of trustworthiness of the second layer.

44. The method of claim 36, wherein the content screening operations comprise using a watermark value obtained from the watermark extraction results to determine a content use policy associated with the content.

45. The method of claim 44, wherein the content use policy is indicative of one of the following:

usage of the content at a consumer home setting is prohibited;

recording of the content is prohibited;

access to the content is allowed after a particular date;

or

access to the content is allowed upon a determination that the content is a trusted source.

46. The method of claim 45, determination that the content is a trusted source comprises determining whether or not the content is protected by a trusted digital rights management (DRM) technology.

47. The method of claim 36, wherein the watermark extraction and content screening operations are carried out according to one of the following configurations:

the watermark extraction operations are conducted at the hardware layer, and the content screening operations are conducted at the operating system layer;

the watermark extraction operations are conducted at the operating system layer, and the content screening operations are conducted at the application layer;

or

the watermark extraction operations are conducted at the hardware layer, and the content screening operations are conducted at the application layer.

48. The method of claim 36, wherein the enforcement action includes one or more of:

presenting a message on a screen of the content handling device, or presenting an advertisement on a screen of the content handling device.

38. A device, comprising:

a processor; and

a memory comprising processor executable code, the processor executable code, when executed by the processor, configures the device to;

operate using multiple abstraction layers in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, each layer comprising an interface to allow communications between components operating within that layer and other layers of the multiple abstraction layers, the multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer;

access a content; and

conduct content management operations using at least two of the multiple abstraction layers, wherein the content management operations comprise;

reception of semantic information related to the content at a first layer, the semantic information indicative of at least a level trustworthiness of the content;

subsequent to reception of the semantic information, watermark extraction operations conducted at the first layer based at least in-part on the level of trustworthiness of the content determined from the received semantic information,

transmission of watermark extraction results from the first layer to a second layer through a secure interface,

content screening operations conducted at the second layer based at least in-part on watermark extraction results, and

initiation of an enforcement action based at least in-part on a result of the content screening in conformance with a use policy of the content.

49. The device of claim 38, wherein the watermark extraction results are communicated from the first layer to the second layer upon a determination of trustworthiness of the second layer.

50. The device of claim 38, wherein the content screening operations comprise using a watermark value obtained from the watermark extraction results to determine a content use policy associated with the content.

51. The device of claim 50, wherein the content use policy is indicative of one of the following:

usage of the content at a consumer home setting is prohibited;

recording of the content is prohibited;

access to the content is allowed after a particular date;

or

access to the content is allowed upon a determination that the content is a trusted source.

52. The device of claim 51, determination that the content is a trusted source comprises determining whether or not the content is protected by a trusted digital rights management (DRM) technology.

53. The device of claim 38, wherein the watermark extraction and content screening operations are carried out according to one of the following configurations:

the watermark extraction operations are conducted at the hardware layer, and the content screening operations are conducted at the operating system layer;

the watermark extraction operations are conducted at the operating system layer, and the content screening operations are conducted at the application layer;

or

the watermark extraction operations are conducted at the hardware layer, and the content screening operations are conducted at the application layer.

54. The device of claim 38, wherein enforcement action includes one or more of:

presenting a message on a screen of the content handling device, or presenting an advertisement on a screen of the content handling device.

55. The device of claim 38, wherein the semantic information indicates one or more of the following:

encryption status of the content,

compression status of the content,

encoding format of the content,

type of the content, or

source of the content.

39. A computer program product, embodied on one or more non-transitory computer readable media, comprising:

program code for accessing a content at a content handling device, the content handling device configured to operate using multiple abstraction layers in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, each layer comprising an interface to allow communications between components operating within that layer and other layers of the multiple abstraction layers, the multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer; and

program code for conducting content management operations using at least two of the multiple abstraction layers, wherein the content management operations comprises;

receiving semantic information related to the content at a first layer, the semantic information indicative of at least a level trustworthiness of the content;

subsequent to receiving the semantic information, conducting watermark extraction operations at the first layer based at least in-part on the level of trustworthiness of the content determined from the received semantic information,

communicating watermark extraction results from the first layer to a second layer through a secure interface,

conducting content screening operations at the second layer based at least in-part on watermark extraction results, and

initiating an enforcement action based at least in-part on a result of the content screening in conformance with a use policy of the content.

40. A method, comprising:

accessing a content at a content handling device, the content handling device configured to operate using multiple abstraction layers in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, each layer comprising an interface to allow communications between components operating within that layer and other layers of the multiple abstraction layers, the multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer; and

initiating content management operations, the content management operations comprising;

receiving semantic information related to the content at a first layer, the semantic information indicative of at least a level trustworthiness of the content,

based at least in-part on the level of trustworthiness of the content determined from the semantic information, determining whether or not to conduct content management operations,

upon a determination to conduct content management operations, communicating the semantic information from the first layer to a second layer through a secure interface between the first layer and the second layer,

conducting watermark extraction operations at the second layer based at least in-part on the received semantic information,

communicating watermark extraction results from the second layer to a third layer through a secure interface between the second layer and the third layer,

conducting content screening operations at the third layer based at least in-part on watermark extraction results, and

initiating an enforcement action based at least in-part on a result of the content screening in conformance with a use policy of the content.

41. A device, comprising:

a processor; and

a memory comprising processor executable code, the processor executable code, when executed by the processor, configures the device to;

access a content, the content handling device configured to operate using multiple abstraction layers in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, each layer comprising an interface to allow communications between components operating within that layer and other layers of the multiple abstraction layers, the multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer; and

initiate content management operations, wherein the content management operations comprise;

reception of semantic information related to the content at a first layer, the semantic information indicative of at least a level trustworthiness of the content,

based at least in-part on the level of trustworthiness of the content determined from the semantic information, determination of whether or not to conduct content management operations,

upon a determination to conduct content management operations, communication of the semantic information from the first layer to a second layer through a secure interface between the first layer and the second layer,

watermark extraction operations conducted at the second layer based at least in-part on the received semantic information,

communication of watermark extraction results from the second layer to a third layer through a secure interface between the second layer and the third layer,

content screening operations conducted at the third layer based at least in-part on watermark extraction results, and

initiation of an enforcement action based at least in-part on a result of the content screening in conformance with a use policy of the content.

42. A computer program product, embodied on one or more non-transitory computer readable media, comprising:

program code for accessing a content at a content handling device, the content handling device configured to operate using multiple abstraction layers in a hierarchical order such that each layer that is positioned at a lower level of hierarchy hides that layer'"'"'s implementation details from all layers that are situated at a higher level of hierarchy with respect to that layer, each layer comprising an interface to allow communications between components operating within that layer and other layers of the multiple abstraction layers, the multiple abstraction layers including an application layer, an operating system layer, a firmware layer and a hardware layer; and

program code for initiating content management operations, the content management operations comprising;

receiving semantic information related to the content at a first layer, the semantic information indicative of at least a level trustworthiness of the content,

based at least in-part on the level of trustworthiness of the content determined from the semantic information, determining whether or not to conduct content management operation,

upon a determination to conduct content management operations, communicating the semantic information from the first layer to a second layer through a secure interface between the first layer and the second layer,

conducting watermark extraction operations at the second layer based at least in-part on the received semantic information,

communicating watermark extraction results from the second layer to a third layer through a secure interface between the second layer and the third layer,

conducting content screening operations at the third layer based at least in-part on watermark extraction results, and

initiating an enforcement action based at least in-part on a result of the content screening in conformance with a use policy of the content.