Interoperable systems and methods for peer-to-peer service orchestration

• US 9,235,834 B2
• Filed: 06/03/2010
• Issued: 01/12/2016
• Est. Priority Date: 06/05/2003
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Bradley, William, Maher, David, Boccon-Gibod, Gilles
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): Nilforoush, Mohammad A
• Application Number:
  US12/792,952
• Publication Number:
  US 20100241849A1
• Time in Patent Office: 2,049 Days
• Field of Search: 705 50- 79
• US Class Current: 1/1
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/1073 Conversion
• CPC Class Codes: G06F 21/1084 via third party
• CPC Class Codes: G06F 21/1085 Content sharing, e.g. peer-to-peer [P2P]
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 2220/10 Usage protection of distributed data files
• CPC Class Codes: G06Q 2220/18 Licensing
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1061 using node-based peer discovery mechanisms static access to replicated servers H04L67/1006; service discovery H04L67/51
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 : using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0861 : Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3263 : involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 : using challenge-response

Abstract

Systems and methods are described for performing policy-managed, peer-to-peer service orchestration in a manner that supports the formation of self-organizing service networks that enable rich media experiences. In one embodiment, services are distributed across peer-to-peer communicating nodes, and each node provides message routing and orchestration using a message pump and workflow collator. Distributed policy management of service interfaces helps to provide trust and security, supporting commercial exchange of value. Peer-to-peer messaging and workflow collation allow services to be dynamically created from a heterogeneous set of primitive services. The shared resources are services of many different types, using different service interface bindings beyond those typically supported in a web service deployments built on UDDI, SOAP, and WSDL. In a preferred embodiment, a media services framework is provided that enables nodes to find one another, interact, exchange value, and cooperate across tiers of networks from WANs to PANs.

Claims

1. A method of accessing content through a composite web service, comprising:

communicating a request for content to a device;

communicating, by the device, with one or more peer nodes using a service access point of the device, comprising;

discovering a peer node providing content services,

negotiating a trusted relationship with the peer node providing content services,

receiving a content object from the peer node providing content services, the content object comprising a content id and an encrypted content item,

receiving a license object from a peer node providing license services, the license object comprising;

a control object including a control program containing instructions for querying an authorization graph for an existence of a first path from a first path node to a second path node and a second path from a third path node to a fourth path node,

a contentkey object including an encrypted content key for decrypting the encrypted content item,

receiving a digitally signed first link object from a peer node providing link objects;

evaluating the license object using a DRM engine of the device, comprising;

verifying, by the DRM engine, the license object,

verifying, by the DRM engine, the digitally signed first link object based on a digital signature of the digitally signed first link object,

constructing, by the DRM engine, the authorization graph, by processing the digitally signed first link object and one or more additional link objects,

generating, by the DRM engine, a chain of keys, by processing the digitally signed first link object and the one or more additional link objects,

querying, by the DRM engine, the authorization graph;

wherein querying comprises the DRM engine executing the control program, and determining, by the control program, the existence of the first path from the first path node to the second path node and the second path from the third path node to the fourth path node, and

generating, by the DRM engine, a target node key by processing the chain of keys; and

based on the determined existence of the first path from the first path node to the second path node and the second path from the third path node to the fourth path node;

generating, by the device, an unencrypted content key by decrypting the encrypted content key using the target node key;

generating, by the device, a decrypted content item by decrypting the encrypted content item using the unencrypted content key; and

accessing, by the device, the decrypted content item.

2. The method of claim 1, wherein the DRM engine comprises a virtual machine and executing the control program comprises using the virtual machine to execute the control program.

3. The method of claim 1, wherein the instructions for querying the authorization graph comprise byte code executed by the DRM engine.

4. The method of claim 1, wherein a workflow collator of the device coordinates communication with the one or more peer nodes.

5. The method of claim 4, wherein the workflow collator coordinates communication according to a service description.

6. The method of claim 5, wherein the service description is expressed in WSDL.

7. The method of claim 5, wherein the service description is expressed in a standard service choreography language.

8. The method of claim 7, wherein the standard service choreography language is WSCI, BPEL, or ebXML.

9. The method of claim 5, wherein the workflow collator uses a state machine to implement the service description.

10. The method of claim 5, wherein the workflow collator interacts with one or more service orchestration plugins to implement the service description.

11. The method of claim 5, wherein the workflow collator communicates with an external service coordinator to implement the service description.

12. The method of claim 1, wherein:

the license object further comprises a controller object binding the control object to the contentkey object, and a protector object binding the contentkey object to the content object, and

verifying the license object comprises verifying the binding between the control object and the contentkey object and verifying the binding between the contentkey object and the content object.

13. The method of claim 12, wherein:

the content object further comprises a content object id,

the control object further comprises a control object id,

the contentkey object further comprises a contentkey id,

a controller object further comprises a reference to the control object id, and a controller reference to the contentkey id,

a protector object further comprises a protector reference to the contentkey id and a reference to the content object,

the binding between the control object and the contentkey object is verified based on the controller reference to the contentkey id and the reference to the control object id, and

the binding between the contentkey object and the content object is verified based on the protector reference to the contentkey id and the reference to the content object id.

14. The method of claim 13, wherein the controller object further includes a hash of the control object and a hash of the contentkey object, and verifying the license object further comprises:

verifying the control object using the hash of the control object included in the controller object, and

verifying the contentkey object using the hash of the contentkey object included in the controller object.

15. The method of claim 13, wherein the controller object is digitally signed using a message authentication code keyed with a key that encrypted the encrypted content key.

16. The method of claim 13, wherein the controller object is digitally signed using a private key, and the controller object binds the private key to the contentkey object based on a hash of the signing private key.

17. The method of claim 1, wherein the DRM engine generates the chain of keys by processing a chain of link objects connecting a first node to a target node.

18. The method of claim 17, wherein each link object in the chain of link objects comprises cryptographic data and a reference to a “

from”

node object and a “

to”

node object.

19. The method of claim 18, wherein the cryptographic data comprises a key of the “

from”

node object encrypted with a key of the “

to”

node object.

20. The method of claim 19, wherein the chain of link objects connects the first node to the target node through at least one intermediate node.

21. The method of claim 19, wherein the key of the “

from”

node object is a symmetric key.

22. The method of claim 19, wherein the key of the “

from”

node object is a private key.

23. The method of claim 17, wherein a DRM profile defines a first node object representing the first node, a target node object representing the target node, and the first link object.

24. The method of claim 23, wherein the DRM profile is expressed in WSDL and the first node object and the target node object are web services agents.

25. A non-transitory computer readable medium containing instructions that, when executed by a processor of a device, cause the device to perform operations comprising:

communicating a request for content to a device;

communicating, by the device, with one or more peer nodes using a service access point of the device, comprising;

discovering a peer node providing content services,

negotiating a trusted relationship with the peer node providing content services,

receiving a content object from the peer node providing content services, the content object comprising a content id and an encrypted content item,

receiving a license object from a peer node providing license services, the license object comprising;

a control object including a control program containing instructions for querying an authorization graph for an existence of a first path from a first path node to a second path node and a second path from a third path node to a fourth path node,

a contentkey object including an encrypted content key for decrypting the encrypted content item,

receiving a digitally signed first link object from a peer node providing link objects;

evaluating the license object using a DRM engine of the device, comprising;

verifying, by the DRM engine, the license object,

verifying, by the DRM engine, the digitally signed first link object based on a digital signature of the digitally signed first link object,

constructing, by the DRM engine, the authorization graph, by processing the digitally signed first link object and one or more additional link objects,

generating, by the DRM engine a chain of keys, by processing the digitally signed first link object and the one or more additional link objects;

querying, by the DRM engine, the authorization graph;

wherein querying comprises the DRM engine executing the control program using a virtual machine of the DRM engine, and determining, by the control program, the existence of the first path from the first path node to the second path node and the second path from the third path node to the fourth path node, and

generating, by the DRM engine, a target node key by processing the chain of keys; and

based on the determined existence of the first path from the first path node to the second path node and the second path from the third path node to the fourth path node;

generating, by the device, an unencrypted content key by decrypting the encrypted content key using the target node key,

generating, by the device, a decrypted content item by decrypting the encrypted content item using the unencrypted content key, and

accessing, by the device, the decrypted content item.

26. The non-transitory computer readable medium of claim 25, wherein a workflow collator of the device coordinates communication with the one or more peer nodes according to a service description expressed in WSDL using a state machine, the workflow collator interacting with one or more service orchestration plugins and an external service coordinator to implement the service description.

27. The non-transitory computer readable medium of claim 25, wherein:

the content object further comprises a content object id,

the control object further comprises a control object id,

the contentkey object further comprises a contentkey id,

the license object further comprises;

a controller object binding the control object to the contentkey object and including a reference to the control object id and a controller reference to the contentkey id, and

a protector object binding the contentkey object to the content object and including a protector reference to the contentkey id and a reference to the content object; and

verifying the license object comprises;

verifying the binding between the control object and the contentkey object based on the reference to the contentkey id and the controller reference to the control object id, and

verifying the binding between the contentkey object and the content object based on the protector reference to the contentkey id and the reference to the content object id.

28. The non-transitory computer readable medium of claim 25, wherein the DRM engine generates the chain of keys by processing a chain of link objects connecting a first node to a target node, each link object in the chain of link objects comprising cryptographic data and a reference to a “

from”

node object and a “

to”

node object, the cryptographic data comprising a key of the “

from”

node object encrypted with a key of the “

to”

node object, the chain of link objects connecting the first node to the target node through at least one intermediate node.

29. A device for obtaining and accessing a content item, comprising:

at least one processor, and

a non-transitory computer memory containing instructions that, when executed by the at least one processor, cause the device to perform operations comprising;

communicating a request for content to the device;

communicating, by the device, with one or more peer nodes using a service access point of the device, comprising;

discovering a peer node providing content services,

negotiating a trusted relationship with the peer node providing content services,

receiving a content object from the peer node providing content services, the content object comprising a content id and an encrypted content item,

receiving a license object from a peer node providing license services, the license object comprising a control object including a control program containing instructions for querying an authorization graph for an existence of a first path from a first path node to a second path node and a second path from a third path node to a fourth path node, and a contentkey object including an encrypted content key for decrypting the encrypted content item, and

receiving a digitally signed first link object from a peer node providing link objects;

evaluating the license object using a DRM engine of the device, comprising;

verifying, by the DRM engine, the license object,

verifying, by the DRM engine, the digitally signed first link object based on a digital signature of the digitally signed first link object,

constructing, by the DRM engine, the authorization graph, by processing the digitally signed first link object and one or more additional link objects,

generating, by the DRM engine a chain of keys, by processing the digitally signed first link object and the one or more additional link objects;

querying, by the DRM engine, the authorization graph;

wherein querying comprises the DRM engine executing the control program, and determining, by the control program, the existence of the first path from the first path node to the second path node and the second path from the third path node to the fourth path node, and

generating, by the DRM engine, a target node key by processing the chain of keys; and

based on the determined existence of the first path from the first path node to the second path node and the second path from the third path node to the fourth path node;

generating, by the device, an unencrypted content key by decrypting the encrypted content key using the target node key;

generating, by the device, a decrypted content item by decrypting the encrypted content item using the unencrypted content key; and

accessing, by the device, the decrypted content item.

30. The device for obtaining and accessing a content item of claim 29, wherein a workflow collator of the device coordinates communication with the one or more peer nodes according to a service description expressed in WSDL using a state machine, the workflow collator interacting with one or more service orchestration plugins and an external service coordinator to implement the service description.

31. The device for obtaining and accessing a content item of claim 29, wherein:

the content object further comprises a content object id,

the control object further comprises a control object id,

the contentkey object further comprises a contentkey id,

the license object further comprises;

a controller object binding the control object to the contentkey object and including a reference to the control object id and a controller reference to the contentkey id, and

a protector object binding the contentkey object to the content object and including a protector reference to the contentkey id and a reference to the content object; and

verifying the license object comprises;

verifying the binding between the control object and the contentkey object based on the controller reference to the contentkey id and the reference to the control object id, and

verifying the binding between the contentkey object and the content object based on the protector reference to the contentkey id and the reference to the content object id.

32. The device for obtaining and accessing a content item of claim 29, wherein the DRM engine generates the chain of keys by processing a chain of link objects connecting a first node to a target node, each link object in the chain of link objects comprising cryptographic data and a reference to a “

from”

node object and a “

to”

node object, the cryptographic data comprising a key of the “

from”

node object encrypted with a key of the “

to”

node object, the chain of link objects connecting the first node to the target node through at least one intermediate node.