Software, systems, and methods for processing digital bearer instruments

• US 10,198,719 B2
• Filed: 08/20/2015
• Issued: 02/05/2019
• Est. Priority Date: 12/29/2005
• Status: Active Grant

• Current Assignee: API Market, Inc.
• Original Assignee: API Market, Inc.
• Inventors: Collins, Kevin, Haven, Richard C., Kintzer, Eric, Olsen, Jeremy, Roever, Stefan, Thrasher, Shannon, Leano, Rhandee, OKelley, Brian
• Primary Examiner(s): Kucab, Jamie R
• Application Number:
  US14/831,713
• Publication Number:
  US 20160048812A1
• Time in Patent Office: 1,265 Days
• Field of Search: 705 59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/085 involving remote charge determination or related payment systems
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/47815 Electronic shopping payment schemes, payment architectures or payment protocols for electronic shopping systems G06Q20/12
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

Methods and apparatus are described which enable flexible and secure processing of digital bearer instruments. An architecture is provided that enables provision of an extensible applications framework that flexibly supports a variety of features and functionality supporting title-based rights processing operations. A wide range of methods of defining and assuring rights processing operating environments extend the capabilities of rights processing operating environments in a variety of ways.

Claims

1. A computer-implemented method, comprising:

receiving a digital bearer instrument, the digital bearer instrument being a digital object expressing a right that is redeemable by presentation of the digital bearer instrument to a process operating in an operating environment configured to redeem digital bearer instruments, the digital bearer instrument identifying the operating environment;

responsive to identification of the operating environment by the digital bearer instrument, obtaining an operating context, the operating context being a data structure that specifies a plurality of operating components associated with the operating environment;

instantiating at least some of the operating environment components using the operating context, thereby generating an instance of the operating environment;

validating each of the instantiated operating environment components; and

processing the digital bearer instrument using the instantiated operating environment components, including;

validating the digital bearer instrument; and

responsive to validation of the digital bearer instrument, redeeming the right expressed by the digital bearer instrument.

2. The method of claim 1, wherein the digital bearer instrument also identifies the operating context.

3. The method of claim 2, wherein the digital bearer instrument includes an identifier that points to the operating context stored externally to the digital bearer instrument, the method further comprising retrieving the operating context using the identifier.

4. The method of claim 2, wherein the digital bearer instrument includes a portion of the operating context.

5. The method of claim 1, wherein the plurality of operating environment components comprise a plurality of integrity-verified components that cannot be undetectably altered, and wherein instantiating at least some of the operating environment components comprises instantiating one or more of the plurality of integrity-verified components using one or more digital signatures and/or manifests.

6. The method of claim 1, wherein the digital bearer instrument represents a second right and identifies a second operating environment, the method further comprising:

instantiating a second plurality of operating environment components according to a second operating context that specifies the second operating environment; and

processing the digital bearer instrument using the second plurality of operating environment components in connection with redemption of the second right.

7. The method of claim 1, wherein processing the digital bearer instrument using the instantiated operating environment components includes one or more of the instantiated operating environment components interoperating with an additional operating environment to facilitate redemption of the right.

8. The method of claim 7, wherein the additional operating environment is an unverified operating environment.

9. The method of claim 1, wherein instantiating at least some of the operating environment components comprises instantiating all of the operating environment components and using the operating environment components as needed to process the digital bearer instrument.

10. The method of claim 1, wherein instantiating at least some of the operating environment components comprises instantiating the operating environment components as needed to process the digital bearer instrument.

11. The method of claim 10, further comprising unloading each instantiated operating environment component after it has been used.

12. The method of claim 1, wherein instantiating at least some of the operating environment components comprises instantiating one or more of (1) a user interface, (2) a verifier configured to verify integrity of any of the operating environment components, (3) a directory, (4) a state process that includes an entry for each digital bearer instrument that indicates validity of the corresponding digital bearer instrument when the entry is synchronized with state information associated with the corresponding digital bearer instrument, (5) a manager configured to facilitate management of a set of digital bearer instruments by a corresponding user, (6) a publisher configured to generate digital bearer instruments, or (7) a resolver configured to facilitate redemption of the rights associated with digital bearer instruments.

13. The method of claim 1, wherein processing the digital bearer instrument using the instantiated operating environment components includes one or more of the instantiated operating environment components interoperating with a verified computing platform and an unverified computing platform intervening between the operating environment and the verified computing platform.

14. A system, comprising one or more computing devices configured to:

receive a digital bearer instrument, the digital bearer instrument being a digital object expressing a right that is redeemable by presentation of the digital bearer instrument to a process operating in an operating environment configured to redeem digital bearer instruments, the digital bearer instrument identifying the operating environment;

responsive to identification of the operating environment by the digital bearer instrument, obtain an operating context, the operating context being a data structure that specifies a plurality of operating components associated with the operating environment;

instantiate at least some of the operating environment components using the operating context, thereby generating an instance of the operating environment;

validate each of the instantiated operating environment components; and

process the digital bearer instrument using the instantiated operating environment components, processing of the digital bearer instrument including;

validating the digital bearer instrument; and

responsive to validation of the digital bearer instrument, redeeming the right expressed by the digital bearer instrument.

15. The system of claim 14, wherein the digital bearer instrument also identifies the operating context.

16. The system of claim 15, wherein the digital bearer instrument includes an identifier that points to the operating context stored externally to the digital bearer instrument, and wherein the one or more computing devices are further configured to retrieve the operating context using the identifier.

17. The system of claim 15, wherein the digital bearer instrument includes a portion of the operating context.

18. The system of claim 14, wherein the plurality of operating environment components comprise a plurality of integrity-verified components that cannot be undetectably altered, and wherein the one or more computing devices are configured to instantiate at least some of the operating environment components by instantiating one or more of the plurality of integrity-verified components using one or more digital signatures and/or manifests.

19. The system of claim 14, wherein the digital bearer instrument represents a second right and identifies a second operating environment, and wherein the one or more computing devices are further configured to:

instantiate a second plurality of operating environment components according to a second operating context that specifies the second operating environment; and

process the digital bearer instrument using the second plurality of operating environment components in connection with redemption of the second right.

20. The system of claim 14, wherein the one or more computing devices are configured to process the digital bearer instrument using the instantiated operating environment components by one or more of the instantiated operating environment components interoperating with an additional operating environment to facilitate redemption of the right.

21. The system of claim 20, wherein the additional operating environment is an unverified operating environment.

22. The system of claim 14, wherein the one or more computing devices are configured to instantiate at least some of the operating environment components by instantiating all of the operating environment components and using the operating environment components as needed to process the digital bearer instrument.

23. The system of claim 14, wherein the one or more computing devices are configured to instantiate at least some of the operating environment components by instantiating the operating environment components as needed to process the digital bearer instrument.

24. The system of claim 23, wherein the one or more computing devices are further configured to unload each instantiated operating environment component after it has been used.

25. The system of claim 14, wherein instantiating at least some of the operating environment components comprises instantiating one or more of (1) a user interface, (2) a verifier configured to verify integrity of any of the operating environment components, (3) a directory, (4) a state process that includes an entry for each digital bearer instrument that indicates validity of the corresponding digital bearer instrument when the entry is synchronized with state information associated with the corresponding digital bearer instrument, (5) a manager configured to facilitate management of a set of digital bearer instruments by a corresponding user, (6) a publisher configured to generate digital bearer instruments, or (7) a resolver configured to facilitate redemption of the rights associated with digital bearer instruments.

26. The system of claim 14, wherein processing the digital bearer instrument using the instantiated operating environment components includes one or more of the instantiated operating environment components interoperating with a verified computing platform and an unverified computing platform intervening between the operating environment and the verified computing platform.