Method and device for providing access to encrypted content and generating a secure content package
First Claim
1. Method of providing access to encrypted content to one of a plurality of consumer systems, each consumer system being able to obtain a secure content package, including the encrypted content and an indication of a location from which to request a rights data object, and further including at least one device having access to a thus obtained secure content package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from the indicated location and for providing access to at least part of the encrypted content, the rights data object including at least content key information enabling decryption of at least part of the encrypted content and being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain the content key information, characterised by transferring a rights issuer module to a protected environment of a device for incorporation in the one consumer system, enabling the device, when operational in the consumer system, to generate at least one rights data object cryptographically bound to a requesting one of the devices in the consumer system provided with an agent function.
2 Assignments
0 Petitions
Accused Products
Abstract
A method is described of providing access to encrypted content to one of a plurality of consumer systems. Each consumer system may be able to obtain a secure content package, including the encrypted content and an indication of a location from which to request a rights data object, and further including at least one device having access to a thus obtained secure content package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from the indicated location. A rights issuer module may be transferred to a protected environment of a device for incorporation in the one consumer system, enabling the device, when operational in the consumer system, to generate at least one rights data object cryptographically bound to a requesting one of the devices in the consumer system provided with an agent function.
97 Citations
14 Claims
-
1. Method of providing access to encrypted content to one of a plurality of consumer systems,
each consumer system being able to obtain a secure content package, including the encrypted content and an indication of a location from which to request a rights data object, and further including at least one device having access to a thus obtained secure content package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from the indicated location and for providing access to at least part of the encrypted content, the rights data object including at least content key information enabling decryption of at least part of the encrypted content and being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain the content key information, characterised by transferring a rights issuer module to a protected environment of a device for incorporation in the one consumer system, enabling the device, when operational in the consumer system, to generate at least one rights data object cryptographically bound to a requesting one of the devices in the consumer system provided with an agent function.
-
8. Data processing device for incorporation into one of a plurality of consumer systems,
each consumer system being able to obtain a secure content package, including the encrypted content and an indication of a location from which to request a rights data object, and further including at least one device having access to a thus obtained secure content package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from the indicated location and for providing access to at least part of the encrypted content, the rights data object including at least content key information enabling decryption of at least part of the encrypted content and being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain the content key information, which data processing device includes a protected environment, characterised in that the data processing device further includes a rights issuer module, configured to run in the protected environment, and enabling the data processing device, when incorporated and operational in the consumer system, to generate at least one rights data object cryptographically bound to a requesting one of the devices in the consumer system provided with an agent function.
-
11. Method of providing a secure content data package, including encrypted content data, for use by one of a plurality of consumer systems,
each consumer system including at least an interface for obtaining the secure content data package from an external source, and further including at least one device having access to a thus obtained secure content data package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from an indicated location and for providing access to at least part of the encrypted content, the rights data object including at least content key information enabling decryption of at least part of the encrypted content data and being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain the content key information, wherein resource indicator data is provided with the encrypted content data, indicative of a location from which a device functioning as the rights issuer is issuing rights data objects, characterised by providing resource indicator data pointing to a location within the one consumer system.
-
12. Server for providing a secure content data package, including encrypted content data, for use by one of a plurality of consumer systems, wherein the server includes a network interface to a communications network and each consumer system includes at least an interface for obtaining the secure content data package via the communications network, and further includes at least one device having access to a thus obtained secure content data package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from an indicated location and for providing access to at least part of the encrypted content, the rights data object including at least content key information enabling decryption of at least part of the encrypted content data and being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain the content key information, wherein the server is configured to provide to the one consumer system resource indicator data with the encrypted content data, indicative of a location from which a device functioning as the rights issuer is issuing rights data objects, characterised in that
the server is configured to provide with the encrypted content data resource indicator data pointing to a location within the one consumer system.
-
13. Signal carrying a secure content data package, including encrypted content data, for use by a consumer system including at least an interface for obtaining the secure content data package from an external source, and further including at least one device having access to a thus obtained secure content data package and provided with an agent function enabling it to retrieve a rights data object from a device issuing rights data objects from an indicated location and for providing access to at least part of the encrypted content, the rights data object including at least content key information enabling decryption of at least part of the encrypted content data and being cryptographically bound to at least the device to which it is issued, such that only devices with an agent function to which the rights data object has been bound are able to obtain the content key information,
wherein the secure content data package includes resource indicator data, indicative of a location from which a device functioning as the rights issuer is issuing rights data objects, characterised in that the secure content data package further includes resource indicator data representative of a data path to a location within the consumer system.
Specification