Federated digital rights management scheme including trusted systems

• US 9,798,863 B2
• Filed: 10/30/2015
• Issued: 10/24/2017
• Est. Priority Date: 03/14/2006
• Status: Active Grant

• Current Assignee: Sonic IP Incorporated (Endeavor Group Holdings Inc.)
• Original Assignee: Sonic IP Incorporated (Endeavor Group Holdings Inc.)
• Inventors: Grab, Eric William, Russell, Chris, Chan, Francis Yee-Dug, Kiefer, Michael George
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US14/928,746
• Publication Number:
  US 20160070890A1
• Time in Patent Office: 725 Days
• Field of Search: 713189, 713164, 726 26, 726 27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1062 Editing
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04N 21/222 Secondary servers, e.g. proxy server, cable television Head-end provisioning of proxy services in data packet switching networks H04L67/56
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.

Claims

1. A federated system for establishing playback parameters for digital content comprising:

a trusted server system, wherein the trusted server system comprises;

a memory;

wherein the memory comprises;

data describing a plurality of user accounts, wherein each user account in the plurality of user accounts comprises a unique user ID associated with the user account; and

a rights management application; and

a microprocessor, wherein the microprocessor is configured by the rights management application to;

receive a first request for playback parameters for a piece of content from a first content server system, where the first request for playback parameters for the piece of content from the first content server system comprises a unique user ID associated with a user account from the plurality of user accounts, and where playback parameters govern the use of the piece of content;

transmit a first set of playback parameters for the piece of content to the first content server system, where the first content server system is configured to provide a first encrypted copy of the piece of content and a first playback certification that enables playback of the first encrypted copy of the piece of content to a first playback device;

receive a second request for playback parameters for the piece of content from a second content server system, where the second request for playback parameters for the piece of content from the second content server system comprises the unique user ID associated with the user account from the plurality of user accounts; and

transmit a second set of playback parameters to the second content server system, where the second content server is configured to provide a second encrypted copy of the piece of content and a second playback certification that enables playback of the second encrypted copy of the piece of content to a second playback device;

wherein the first playback certification cannot be used to playback the second encrypted copy of the piece of content and the second playback certification cannot be used to playback the first encrypted copy of the piece of content.

2. The federated system for establishing playback parameters for digital content of claim 1, wherein the transmitted first set of playback parameters is part of the first playback certification.

3. The federated system for establishing playback parameters for digital content of claim 1, wherein the first content server system is configured to encrypt the first copy of the piece of content using a different encryption scheme than the second content server system is configured to encrypt the second copy of the piece of content.

4. The federated system for establishing playback parameters for digital content of claim 1, wherein the first content server system is configured to encrypt the first copy of the piece of content using a first set of encryption keys, and the second content server system is configured to encrypt the second copy of the piece of content using a second set of encryption keys.

5. The federated system for establishing playback parameters for digital content of claim 1, wherein the microprocessor is further configured by the rights management application to:

receive a request for registration from a new playback device; and

register the new playback device by associating the new playback device with the unique user ID.

6. The federated system for establishing playback parameters for digital content of claim 5, wherein the microprocessor is further configured by the rights management application to generate a user encryption key that is specific to the unique user ID.

7. The federated system for establishing playback parameters for digital content of claim 1, wherein the memory further comprises data describing a plurality of base encryption keys used in the issuance of playback certifications.

8. The federated system for establishing playback parameters for digital content of claim 7, wherein the plurality of base encryption keys comprises at least one active base key.

9. The federated system for establishing playback parameters for digital content of claim 1, wherein the first content server is configured to send the trusted server system a playback certification request message comprising:

a content message comprising data describing at least one content key;

a user message comprising data describing at least one user encryption key; and

instruction data describing what type of playback certification to generate, where the instruction data comprises playback parameters; and

the microprocessor is further configured by the rights management application to generate at least one playback certification based on the playback certification request message.

10. The federated system for establishing playback parameters for digital content of claim 9, wherein the first playback certification is generated with a different set of playback parameters from the second playback certification.

11. The federated system for establishing playback parameters for digital content of claim 9, wherein the memory further comprises data describing a plurality of base encryption keys used in the issuance of playback certifications and the at least one generated playback certification comprises data describing an encryption table, where each entry in the encryption table is a content key encrypted using a different key from the plurality of base encryption keys.

12. The federated system for establishing playback parameters for digital content of claim 11, wherein the first playback certification is generated with a different encryption table than the second playback certification.

13. The federated system for establishing playback parameters for digital content of claim 1, wherein the playback parameters describe a predetermined number of times the user account can access the piece of content.

14. The federated system for establishing playback parameters for digital content of claim 1, wherein the playback parameters allow the user account to access the piece of content an unlimited number of times.

15. The federated system for establishing playback parameters for digital content of claim 1, wherein the first content server system comprises a first plurality of content servers, and the second content server system comprises a second plurality of content servers.

16. The federated system for establishing playback parameters for digital content of claim 15, wherein at least two content servers in the first plurality of content servers perform different functions with respect to enable playback of the piece of content.

17. A process for establishing playback parameters for digital content using a federated system comprising:

receiving, by a trusted server system, a first request for playback parameters for a piece of content from a first content server, where the first request for playback parameters for the piece of content from the first content server comprises a unique user ID associated with a user account from the plurality of user accounts, and where playback parameters govern the use of the piece of content;

transmitting, using the trusted server system, a first set of playback parameters for the piece of content to the first content server system;

encrypting, using a first content server system, a first copy of the piece of content and generating a first playback certification that enables playback of the first encrypted copy of the piece of content;

receiving, by a trusted server system, a second request for playback parameters for the piece of content from a second content server system where the second request for playback parameters for the piece of content from the second content server comprises the unique user ID associated with the user account from the plurality of user accounts;

transmitting, using the trusted server system, a second set of playback parameters to the second content server; and

encrypting, using a second content server system, a second copy of the piece of content and generating a second playback certification that enables playback of the second encrypted copy of the piece of content;

wherein the first playback certification cannot be used to playback the second encrypted copy of the piece of content and the second playback certification cannot be used to playback the first encrypted copy of the piece of content.

18. The process for establishing playback parameters for digital content using a federated system of claim 17, wherein the transmitted first set of playback parameters is part of the first playback certification.

19. The process for establishing playback parameters for digital content using a federated system of claim 17, where encrypting, using a first content server system, a first copy of the piece of content with a first playback certification further comprises encrypting the first copy of the piece of content using a different encryption scheme than the second content server system is configured to encrypt the second copy of the piece of content with.

20. The process for establishing playback parameters for digital content using a federated system of claim 17, where encrypting, using a first content server system, a first copy of the piece of content with a first playback certification further comprises encrypting the first copy of the piece of content using a first set of encryption keys;

and encrypting, using a second content server system a second copy of the piece of content with a second playback certification further comprises encrypting the second copy of the piece of content using a second set of encryption keys.

21. The process for establishing playback parameters for digital content using a federated system of claim 17, further comprising:

receiving, by the trusted server system, a request for registration from a playback device; and

registering, using the trusted server system, the playback device by associating the playback device with the unique user ID.

22. The process for establishing playback parameters for digital content using a federated system of claim 21, further comprising generating, using a trusted server system, a user encryption key that is specific to the unique user ID.

23. The process for establishing playback parameters for digital content using a federated system of claim 17, further comprising receiving, by the trusted server system data describing a plurality of base encryption keys used in the issuance of playback certifications.

24. The process for establishing playback parameters for digital content using a federated system of claim 23, wherein the plurality of base encryption keys comprises at least one active base key.

25. The process for establishing playback parameters for digital content using a federated system of claim 17, further comprising receiving, by a trusted server system, a playback certification request message from the first content server, wherein the playback certification request message comprises:

a content message comprising data describing at least one content key;

a user message comprising data describing at least one user encryption key; and

instruction data describing what type of playback certification to generate, where the instruction data comprises playback parameters; and

generating at least one playback certification based on the playback certification request message using the trusted server system.

26. The process for establishing playback parameters for digital content using a federated system of claim 25, further comprising generating, using a trusted server system, the first playback certification with a different set of playback parameters from the second playback certification.

27. The process for establishing playback parameters for digital content using a federated system of claim 25, further comprising receiving, by the trusted server system, data describing a plurality of base encryption keys used in the issuance of playback certifications, and the at least one generated playback certification comprises data describing an encryption table, where each entry in the encryption table is a content key encrypted using a different key from the plurality of base encryption keys.

28. The process for establishing playback parameters for digital content using a federated system of claim 27, further comprising generating, using the trusted server system the first playback certification with a different encryption table than the second playback certification.

29. The process for establishing playback parameters for digital content using a federated system of claim 17, wherein the playback parameters describe a predetermined number of times the user account can access the piece of content.

30. The process for establishing playback parameters for digital content using a federated system of claim 17, wherein the playback parameters allow the user account to access the piece of content an unlimited number of times.

31. The process for establishing playback parameters for digital content of claim 17, wherein the first content server system comprises a first plurality of content servers, and the second content server system comprises a second plurality of content servers.

32. The process for establishing playback parameters for digital content of claim 31, wherein at least two content servers in the first plurality of content servers perform different functions with respect to enabling playback of the piece of content.