Ticket-based implementation of content leasing

• US 9,548,859 B2
• Filed: 12/03/2008
• Issued: 01/17/2017
• Est. Priority Date: 12/03/2008
• Status: Expired due to Fees

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Inventors: Medvinsky, Alexander
• Primary Examiner(s): Patel, Ashok
• Assistant Examiner(s): GRACIA, GARY S
• Application Number:
  US12/327,326
• Publication Number:
  US 20100138903A1
• Time in Patent Office: 2,967 Days
• Field of Search: 726/10
• US Class Current: 1/1
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807

Abstract

The present invention is a method and system for accessing digital content stored on a computing device. An agreement between a subscriber and a content provider allows the subscriber to lease the digital content from the content provider, and download the digital content from a content server operated by the content provider. The method retrieves a service ticket for the computing device, and retrieves content rights for the digital content. The service ticket includes authorization data, and a session key, where the authorization data include authorized subscription services for the computing device. The content rights include required subscription services for the digital content and are delivered authenticated with the session key. The method allows access to the digital content when the authorized subscription services included with the authorization data match the required subscription services included with the content rights.

Claims

1. A method for accessing digital content by a mobile computing device that is available to stationary set top boxes, the mobile computing device communicating via a home network with a home key distribution center, comprising:

retrieving a service ticket for the mobile computing device, the service ticket including authorization data that includes a first identification of at least one authorized subscription service for the mobile computing device, and a session key, that are not unique to the mobile computing device;

retrieving, for the digital content, content rights that include a second identification of at least one subscription service that is required for access to play the stored digital content, wherein the content rights are delivered authenticated with the session key;

validating, by the mobile computing device, that the at least one authorized subscription service identified in the authorization data is non-expired and matches the at least one required subscription service identified in the content rights;

allowing access by the mobile computing device to play the digital content stored on the mobile computing device only if the validating is successful;

sending a request for a home service ticket to the home key distribution center;

receiving the home service ticket including home authorization data that consolidates the authorization data from other mobile computing devices that communicate with the home key distribution center and the session key;

sending a key request message to the home key distribution center that includes the home service ticket and a second content identifier; and

receiving, from the home key distribution center, second content rights corresponding to the second content identifier, wherein the home key distribution center receives the second content rights by sending a DRM request message to a DRM server for the right to play second digital content and the DRM server receives the DRM request message and sends a DRM reply message to the home key distribution center that supplies the second content rights, including a second content key;

wherein the validating, by the mobile computing device, enforces an agreement between a subscriber and a content provider that allows the subscriber to lease the digital content from the content provider, and wherein to lease comprises a right to download, and to store in the mobile computing device, the digital content from a content server operated by the content provider.

2. The method of claim 1, wherein the retrieving of the service ticket further comprises:

sending a request for a ticket granting ticket to a key distribution center for the content server;

receiving the ticket granting ticket;

storing the ticket granting ticket on the mobile computing device;

sending a request for the service ticket to the key distribution center;

receiving the service ticket;

receiving the authorization data;

storing the service ticket on the mobile computing device; and

storing the authorization data on the mobile computing device.

3. The method of claim 1, wherein the retrieving of the content rights further comprises:

sending a key request for the content rights to the content server, the key request including the service ticket and the authorization data;

receiving the content rights including content rights and a content key; and

storing the content rights on the mobile computing device.

4. The method of claim 1, wherein when the agreement between the subscriber and the content provider terminates, the allowing of access and playing the stored digital content further comprises:

reinstating the agreement between the subscriber and the content provider to allow the subscriber to lease the digital content from the content provider.

5. The method of claim 1, wherein the home key distribution center is a media server, the method further comprising:

sending a key request to the media server for the digital content; and

receiving a key reply that includes the content rights for the digital content,

wherein the mobile computing device allows access to play the digital content stored on the mobile computing device only upon validating that the at least one subscription service identified in the content rights matches the at least one authorized subscription service identified in the authorization data.

6. A system for accessing digital content by a mobile computing device that is available to stationary set top boxes, the mobile computing device communicating via a home network with a home key distribution center, comprising:

a memory device resident in the mobile computing device; and

a processor disposed in communication with the memory device, the processor configured to;

retrieve a service ticket for the mobile computing device, the service ticket including authorization data that includes a first identification of at least one authorized subscription service for the mobile computing device, and a session key, that are not unique to the mobile computing device;

retrieve, for the digital content, content rights that include a second identification of at least one subscription service that is required for access to play the stored digital content, wherein the content rights are delivered authenticated with the session key;

validate, by the mobile computing device, that the at least one authorized subscription service identified in the authorization data is non-expired and matches the at least one required subscription service identified in the content rights;

allow access by the mobile computing device to play the digital content stored on the mobile computing device only if the validating is successful;

send a request for a home service ticket to the home key distribution center;

receive the home service ticket including home authorization data that consolidates the authorization data from other mobile computing devices that communicate with the home key distribution center and the session key;

send a key request message to the home key distribution center that includes the home service ticket and a second content identifier; and

receive, from the home key distribution center, second content rights corresponding to the second content identifier, wherein the home key distribution center receives the second content rights by sending a DRM request message to a DRM server for the right to play second digital content and the DRM server receives the DRM request message and sends a DRM reply message to the home key distribution center that supplies the second content rights, including a second content key;

wherein the validating by the mobile computing device enforces an agreement between a subscriber and a content provider that allows the subscriber to lease the digital content from the content provider, and wherein to lease comprises a right to download, and to store in the mobile computing device, the digital content from a content server operated by the content provider.

7. The system of claim 6, wherein to retrieve the service ticket, the processor is further configured to:

send a request for a ticket granting ticket to a key distribution center for the content server;

receive the ticket granting ticket;

store the ticket granting ticket on the mobile computing device;

send a request for the service ticket to the key distribution center;

receive the service ticket;

receive the authorization data;

store the service ticket on the mobile computing device; and

store the authorization data on the mobile computing device.

8. The system of claim 6, wherein to retrieve the content rights, the processor is further configured to:

send a key request for the content rights to the content server, the key request including the service ticket and the authorization data;

receive the content rights including content rights and a content key; and

store the content rights on the mobile computing device.

9. The system of claim 6, wherein when the agreement between the subscriber and the content provider terminates, to allow access and play the previously stored digital content, the processor is further configured to:

reinstate the agreement between the subscriber and the content provider to allow the subscriber to lease the digital content from the content provider.

10. The system of claim 6, wherein the home key distribution center is a media server, the processor is further configured to:

send a key request to the media server for the digital content; and

receive a key reply that includes the content rights for the digital content,

wherein the mobile computing device allows access to play the digital content stored on the mobile computing device only upon validating the at least one subscription service identified in the content rights matches the at least one authorized subscription service identified in the authorization data.

11. A method for accessing digital content by at least one mobile computing device that is available to stationary set top boxes, each mobile computing device communicating via a home network with a home key distribution center, comprising:

retrieving a service ticket for the at least one mobile computing device from the home key distribution center, the service ticket including authorization data that includes a first identification of at least one authorized subscription service for the home key distribution center, and a session key, that are not unique to the mobile computing device;

retrieving, for the digital content, content rights from the home key distribution center, wherein the content rights include a second identification of at least one subscription service that is required for access to play the stored digital content and are delivered authenticated with the session key;

validating, by the at least one mobile computing device, that the at least one authorized subscription service identified in the authorization data is non-expired and matches the at least one required subscription service identified in the content rights;

allowing access by the at least one mobile computing device to play the digital content stored on the at least one mobile computing device only if the validating is successful;

sending a request for a home service ticket to the home key distribution center;

receiving the home service ticket including home authorization data that consolidates the authorization data from other mobile computing devices that communicate with the home key distribution center and the session key;

sending, by the at least one mobile computing device, a key request message to the home key distribution center that includes the home service ticket and a second content identifier; and

receiving, from the home key distribution center by the at least one mobile computing device, second content rights corresponding to the second content identifier, wherein the home key distribution center receives the second content rights by sending a DRM request message to a DRM server for the right to play second digital content and the DRM server receives the DRM request message and sends a DRM reply message to the home key distribution center that supplies the second content rights, including a second content key;

wherein the validating by the at least one mobile computing device enforces an agreement between a subscriber and a content provider that allows the subscriber to lease the digital content from the content provider, and wherein to lease comprises a right to download, and to store in the at least one mobile computing device, the digital content from a content server operated by the content provider.

12. The method of claim 11, wherein the retrieving of the service ticket further comprises:

sending a request for the service ticket;

receiving the service ticket; and

storing the service ticket on the mobile computing device.

13. The method of claim 11, wherein the retrieving of the content rights further comprises:

sending a request for the content rights;

receiving the content rights; and

storing the content rights on the mobile computing device.

14. The method of claim 11, wherein to retrieve the content rights, the method further comprises:

sending a request for the content rights from the home key distribution center to a DRM server associated with another content provider;

receiving the content rights, and the second identification of the at least one subscription service for the digital content; and

storing the content rights, and the second identification of the at least one subscription service for the digital content on the home key distribution center.

15. A system for accessing digital content by at least one mobile computing device that is available to stationary set top boxes, each mobile computing device communicating via a home network with a home key distribution center, comprising:

a memory device resident in the at least one mobile computing device; and

a processor disposed in communication with the memory device, the processor configured to;

retrieve a service ticket for the at least one mobile computing device from the home key distribution center, the service ticket including authorization data that includes a first identification of at least one authorized subscription service for the home key distribution center, and a session key, that are not unique to the mobile computing device;

retrieve, for the digital content, content rights from the home key distribution center, wherein the content rights include a second identification of at least one subscription service that is required for access to play the stored digital content and are delivered authenticated with the session key;

validating, by the at least one mobile computing device, that the at least one authorized subscription service identified in the authorization data is non-expired and matches the at least one required subscription service identified in the content rights;

allowing access by the at least one mobile computing device to play the digital content stored on the at least one mobile computing device only if the validating is successful;

sending a request for a home service ticket to the home key distribution center;

receiving the home service ticket including home authorization data that consolidates the authorization data from other mobile computing devices that communicate with the home key distribution center and the session key;

sending, by the at least one mobile computing device, a key request message to the home key distribution center that includes the home service ticket and a second content identifier; and

receiving, from the home key distribution center by the at least one mobile computing device, second content rights corresponding to the second content identifier, wherein the home key distribution center receives the second content rights by sending a DRM request message to a DRM server for the right to play second digital content and the DRM server receives the DRM request message and sends a DRM reply message to the home key distribution center that supplies the second content rights, including a second content key;

wherein the validating by the at least one mobile computing device enforces an agreement between a subscriber and a content provider that allows the subscriber to lease the digital content from the content provider, wherein to lease comprises a right to download, and to store in the at least one mobile computing device, the digital content from a content server operated by the content provider.

16. The system of claim 15, wherein to retrieve the service ticket, the processor is further configured to:

send a request for the service ticket;

receive the service ticket; and

store the service ticket on the mobile computing device.

17. The system of claim 15, wherein to retrieve the content rights, the processor is further configured to:

send a request for the content rights;

receive the content rights; and

store the content rights on the mobile computing device.

18. The system of claim 15, wherein to retrieve the content rights, the processor is further configured to:

send a request for the content rights from the home key distribution center to a DRM server associated with another content provider;

receive the content rights, and the second identification of the at least one subscription service for the digital content; and

store the content rights, and the second identification of the at least one subscription service for the digital content on the home key distribution center.