Systems and methods for managing and protecting electronic content and applications

• US 9,418,210 B2
• Filed: 12/15/2014
• Issued: 08/16/2016
• Est. Priority Date: 06/09/2000
• Status: Expired due to Term

• Current Assignee: PLS IV, LLC (Pretium Partners, LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Maher, David P., Rudd, James M., Swenson, Eric J., Landsman, Richard A.
• Primary Examiner(s): LEWIS, LISA C
• Application Number:
  US14/571,034
• Publication Number:
  US 20150269359A1
• Time in Patent Office: 610 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G16H 20/10 relating to drugs or medications, e.g. for ensuring correct administration to patients

Abstract

Systems and methods are disclosed for managing and protecting electronic content and applications. Applications, content, and/or users can be given credentials by one or more credentialing authorities upon satisfaction of a set of requirements. Rights management software/hardware is used to attach and detect these credentials, and to enforce rules that indicate how content and applications may be used if certain credentials are present or absent. In one embodiment an application may condition access to a piece of electronic content upon the content'"'"'s possession of a credential from a first entity, while the content may condition access upon the application'"'"'s possession of a credential from a second entity and/or the user'"'"'s possession of a credential from a third entity. Use of credentials in this manner enables a wide variety of relatively complex and flexible control arrangements to be put in place and enforced with relatively simple rights management technology.

Claims

1. A method for managing the use of protected electronic content by a rights management application executing on a computing device, the method comprising:

receiving, from a first application executing on the computing device, by a second application executing on the computing device, a request to use the protected electronic content and a first credential associated with the first application;

receiving, from the second application executing on the computing device by the rights management application, the request to use the protected content and a second credential associated with the second application;

validating, by the rights management application, the second credential;

sending, by the rights management application based on validating the second credential, the protected electronic content to the second application;

validating, by the second application, the first credential; and

sending, by the second application based on validating the first credential, the protected electronic content to the first application for use in accordance with the request.

2. The method of claim 1, wherein the first credential comprises a credential issued by a credentialing authority based on the credentialing authority validating that the first application meets a predefined level of security.

3. The method of claim 1, wherein the second credential comprises a credential issued by a credentialing authority based on the credentialing authority validating that the second application meets a predefined level of security.

4. The method of claim 1, wherein the request to use the protected electronic content comprises a request to render the protected electronic content.

5. The method of claim 1, wherein the request to use the protected electronic content comprises a request to receive a copy of the protected electronic content.

6. The method of claim 1, wherein the protected electronic content comprises electronic content stored in a protected storage managed by the rights management application.

7. The method of claim 1, wherein the protected electronic content comprises electronic content stored in unprotected storage encrypted with a protected key.

8. The method of claim 1, wherein the protected electronic content is associated with at least one control governing use of the protected electronic content.

9. The method of claim 8, wherein the at least one control requires possession of the first credential prior to allowing use of the protected electronic content.

10. The method of claim 9, wherein the at least one control is securely associated with the protected electronic content.

11. A non-transitory computer-readable storage medium storing instructions that, when executing by a processor of a computing system, are configured to cause the processor to:

receive, from a first application executing on the computing system by a second application executing on the computing system, a request to use a piece of electronic content managed by a rights management application executing on the computing system and first credential associated with the first application;

receive, from the second application executing on the computing device by the rights management application, the request to use the protected content and a second credential associated with the second application;

validate, by the rights management application, the second credential;

send, by the rights management application based on validating the second credential, the protected electronic content to the second application;

validate, by the second application, the first credential; and

send, by the second application based on validating the first credential, the protected electronic content to the first application for use in accordance with the request.

12. The non-transitory computer-readable storage medium of claim 11, wherein the first credential comprises a credential issued by a credentialing authority based on the credentialing authority validating that the first application meets a predefined level of security.

13. The non-transitory computer-readable storage medium of claim 11, wherein the second credential comprises a credential issued by a credentialing authority based on the credentialing authority validating that the second application meets a predefined level of security.

14. The non-transitory computer-readable storage medium of claim 11, wherein the request to use the protected electronic content comprises a request to render the protected electronic content.

15. The non-transitory computer-readable storage medium of claim 11, wherein the request to use the protected electronic content comprises a request to receive a copy of the protected electronic content.

16. The non-transitory computer-readable storage medium of claim 11, wherein the protected electronic content comprises electronic content stored in a protected storage managed by the rights management application.

17. The non-transitory computer-readable storage medium of claim 11, wherein the protected electronic content comprises electronic content stored in unprotected storage encrypted with a protected key.

18. The non-transitory computer-readable storage medium of claim 11, wherein the protected electronic content is associated with at least one control governing use of the protected electronic content.

19. The non-transitory computer-readable storage medium of claim 18, wherein the at least one control requires possession of the first credential prior to allowing use of the protected electronic content.

20. The non-transitory computer-readable storage medium of claim 19, wherein the at least one control is securely associated with the protected electronic content.