Federated digital rights management scheme including trusted systems

• US 10,878,065 B2
• Filed: 10/23/2017
• Issued: 12/29/2020
• Est. Priority Date: 03/14/2006
• Status: Active Grant

• Current Assignee: Sonic IP Incorporated (Endeavor Group Holdings Inc.)
• Original Assignee: DivX, LLC (f/k/a DivX CF Holdings LLC) (SoftBank Group Corp.)
• Inventors: Grab, Eric William, Russell, Chris, Chan, Francis Yee-Dug, Kiefer, Michael George
• Primary Examiner(s): Tran, Tongoc
• Application Number:
  US15/791,265
• Publication Number:
  US 20180060543A1
• Time in Patent Office: 1,163 Days
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1062 Editing
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04N 21/222 Secondary servers, e.g. proxy server, cable television Head-end provisioning of proxy services in data packet switching networks H04L67/56
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

Federated systems for issuing playback certifications granting access to technically protected content are described. One embodiment of the system includes a registration server connected to a network, a content server connected to the network and to a trusted system, a first device including a non-volatile memory that is connected to the network and a second device including a non-volatile memory that is connected to the network. In addition, the registration server is configured to provide the first device with a first set of activation information in a first format, the first device is configured to store the first set of activation information in non-volatile memory, the registration server is configured to provide the second device with a second set of activation information in a second format, and the second device is configured to store the second set of activation information in non-volatile memory.

Claims

1. A federated system for distributing encrypted multimedia content for playback comprising:

a trusted registration server system configured to authorize distribution of encrypted content by a plurality of content provider server systems that utilize different digital rights management systems;

wherein the trusted registration server system is configured to;

maintain a set of user accounts;

receive a first set of information for a piece of multimedia content from a first content provider server system from the plurality of content provider server systems, wherein the first content provider server system distributes content utilizing a first protection schema and the first set of information comprises;

rights granted with respect to the piece of multimedia content; and

a user ID associated with a first user account from the set of user accounts; and

authorize distribution of the piece of multimedia content by a second content provider server system from the plurality of content provider server systems based on the first set of information, wherein the second content provider server system distributes content utilizing a different second protection schema;

wherein the second content provider server system is configured to;

store a first encrypted copy of the piece of multimedia content, where the first encrypted copy is encrypted using at least a content key;

receive authorization to distribute the piece of multimedia content from the trusted registration server based on the first set of information;

receive a request for the piece of multimedia content from the first media player; and

provide a first encrypted copy of the piece of multimedia content and a first playback certification to the first media player, where;

the first playback certification is generated according to the second protection schema after receiving authorization from the trusted registration server to distribute the piece of multimedia content and the request for the piece of multimedia content from the first media player; and

the first playback certification enables playback of the first encrypted copy of the piece of multimedia content by the first media player.

2. The federated system of claim 1, wherein the first playback certification from the second content provider server system cannot be used with a second encrypted copy of the piece of multimedia content from a third content provider server system.

3. The federated system of claim 1, wherein the rights granted with respect to the piece of multimedia content are associated with the user ID.

4. The federated system of claim 1, wherein the rights granted with respect to the piece of multimedia content are associated with the first media player.

5. The federated system of claim 1, wherein the trusted registration server system authorizes distribution of the piece of multimedia content by communicating a second set of information for the piece of multimedia content to the second content provider server system, wherein the second set of information comprises rights associated with the piece of multimedia content for the first user account.

6. The federated system of claim 1, wherein the trusted registration server system is further configured to:

receive a second set of information for a second piece of multimedia content from the second content provider server system, wherein the second set of information comprises;

rights granted with respect to the second piece of multimedia content; and

a user ID associated with the first user account from the set of user accounts; and

authorize distribution of the second piece of multimedia content by the first content provider server system.

7. The federated system of claim 1, wherein the first playback certification comprises a set of one or more content encryption keys comprising the at least one content key for decrypting the first encrypted copy of the piece of multimedia content.

8. The federated system of claim 7, wherein the set of one or more content encryption keys is encrypted using a set of one or more user encryption keys.

9. The federated system of claim 8, wherein second content provider server system is further configured to maintain the set of user encryption keys.

10. The federated system of claim 7, wherein the at least one content key is used to generate a frame encryption key.

11. The federated system of claim 1, wherein the first playback certification is a first of a plurality of playback certifications for the piece of multimedia content, wherein each playback certification of the plurality of playback certifications enables playback of the piece of multimedia content by a different class of devices.

12. The federated system of claim 1, wherein the trusted registration server system is implemented using secure software that is tamper resistant.

13. The federated system of claim 1, wherein the trusted registration server system is implemented using secure hardware that is tamper resistant.

14. The federated system of claim 1, wherein the different digital rights management systems use different types of DRM licenses.

19. The method of claim 14, wherein the at least one content key is used to generate a frame encryption key.

15. A method for distributing encrypted multimedia content for playback comprising:

maintaining a set of user accounts;

receiving a first set of information for a piece of multimedia content from a first content provider server system from a plurality of content provider server systems, wherein the first content provider server system distributes content utilizing a first protection schema and the first set of information comprises;

rights granted with respect to the piece of multimedia content; and

a user ID associated with a first user account from the set of user accounts; and

authorizing distribution of the piece of multimedia content by a second content provider server system based on the first set of information, wherein the second content provider server system is configured to distribute content utilizing a different second protection schema, wherein the second content provider server system;

stores a first encrypted copy of the piece of multimedia content, where the first encrypted copy is encrypted using at least a content key;

receives authorization from a trusted registration server to distribute the piece of multimedia content;

receives a request for the piece of multimedia content from the first media player; and

provides a first encrypted copy of the piece of multimedia content and a first playback certification to the first media player, where;

the first playback certification is generated according to the second protection schema after receiving authorization from the trusted registration server to distribute the piece of multimedia content and a request for the piece of multimedia content from the first media player, and

the first playback certification enables playback of the first encrypted copy of the piece of multimedia content by the first media player.

16. The method of claim 15, wherein authorizing distribution of the piece of multimedia content comprises communicating a second set of information for the piece of multimedia content to the second content provider server system, wherein the second set of information comprises rights associated with the piece of multimedia content for the first user account.

17. The method of claim 15 further comprising:

receiving a second set of information for a second piece of multimedia content from the second content provider server system, wherein the second set of information comprises;

rights granted with respect to the second piece of multimedia content; and

a user ID associated with the first user account from the set of user accounts; and

authorizing distribution of the second piece of multimedia content by the first content provider server system.

18. The method of claim 17, wherein the at least one content encryption key is encrypted using a set of one or more user encryption keys.