Software, systems, and methods for processing digital bearer instruments

• US 20070157320A1
• Filed: 12/22/2006
• Published: 07/05/2007
• Est. Priority Date: 12/29/2005
• Status: Active Grant

• Current Assignee: API Market, Inc.
• Original Assignee: Navio Systems, Inc.
• Inventors: Collins, Kevin, Kintzer, Eric, Thrasher, Shannon, Olsen, Jeremy, Haven, Richard, Roever, Stefan, Leano, Rhandee, O'Kelly, Brian
• Granted Patent: US 9,177,338 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

Methods and apparatus are described which enable flexible and secure processing of digital bearer instruments. An architecture is provided that enables provision of an extensible applications framework that flexibly supports a variety of features and functionality supporting title-based rights processing operations. A wide range of methods of defining and assuring rights processing operating environments extend the capabilities of rights processing operating environments in a variety of ways.

Claims

1. A computing system comprising one or more computing platforms configured to instantiate one or more operating environments for processing title objects, each title object comprising a digital bearer instrument representing at least one right which may be redeemed by presentation of the title object to a title-enabled process, each title object identifying at least one of the one or more operating environments, the one or more computing platforms being configured to instantiate each operating environment by selectively instantiating a plurality of operating environment components according to a corresponding predefined operating context which specifies the operating environment, the plurality of operating environment components being operable to facilitate redemption of the rights represented by the title objects identifying the corresponding operating environment.

2. The computing system of claim 1 wherein each of the title objects identifies the operating context corresponding to the operating environment identified by the title object, and wherein the one or more computing platforms are configured to instantiate the one or more operating environments with reference to the operating contexts identified by the title objects.

3. The computing system of claim 2 wherein a first one of the title objects includes an operating context identifier which points to the corresponding operating context stored externally to the first title object.

4. The computing system of claim 2 wherein a first one of the title objects includes at least a portion of the operating context identified by the first title object.

5. The computing system of claim 1 wherein the one or more computing platforms are configured to instantiate a single operating environment with reference to the corresponding operating context.

6. The computing system of claim 1 wherein the plurality of operating environment components comprise a plurality of integrity-verified components which cannot be undetectably altered, and wherein the one or more computing platforms are configured to instantiate the plurality of integrity-verified components using digital signatures and manifests.

7. The computing system of claim 1 wherein the one or more computing platforms comprise one or more of a handheld device, a personal computer, a server, a network appliance, a piece of networking equipment, a single computing platform, or a distributed computing platform.

8. The computing system of claim 1 wherein a first one of the title objects identifies a plurality of operating environments each of which corresponds to a different operating context, each of the operating environments identified by the first title object corresponding to a different right represented by the first title object, and wherein the one or more computing platforms are configured to instantiate each of the operating environments with reference to one of the operating contexts.

9. The computing system of claim 1 wherein the one or more computing platforms are deployed in a network including a plurality of additional computing platforms, first ones of the additional computing platforms corresponding to additional operating environments configured to process the title objects, wherein the one or more computing platforms are configured to interoperate with the first additional computing platforms to facilitate redemption of the rights represented by the title objects.

10. The computing system of claim 1 wherein a first one of the operating environment components is configured to instantiate a user interface configured to facilitate interaction by a user with selected ones of the title objects associated with the user, and wherein the user interface includes a first presentation mode in which a tab corresponding to the user interface is presented at an edge of a display window, and a second presentation mode in which a user interface window connected to the tab is overlaid on the display window, the user interface window including user interface objects configured to facilitate interaction by the user with the selected title objects, wherein selection of the tab results in the user interface window appearing to slide in to or out from the edge of the display window.

11. A computing system comprising one or more computing platforms configured to instantiate one or more verified operating environments for processing title objects, each title object comprising a digital bearer instrument representing at least one right which may be redeemed by presentation of the title object to a title-enabled process, each title object identifying at least one of the one or more verified operating environments, the one or more computing platforms being configured to instantiate each verified operating environment by instantiating a plurality of integrity-verified components, the integrity-verified components being configured to facilitate redemption of the rights represented by the title objects identifying the corresponding verified operating environment, wherein the instantiated integrity-verified components cannot be undetectably altered.

12. The computing system of claim 11 wherein the one or more computing platforms are configured to instantiate the plurality of integrity-verified components using digital signatures and manifests.

13. The computing system of claim 11 wherein the plurality of integrity-verified components implements one or more of a user interface, a verifier configured to verify integrity of any of the integrity-verified components, a directory, a state process which includes an entry for each title object which indicates validity of the corresponding title object when the entry is synchronized with state information associated with the corresponding title object, a title manager operable to facilitate management of selected ones of the title objects by a corresponding user, a title publisher operable to generate the title objects, or at least one title resolver operable to receive the title objects and facilitate redemption of the rights associated therewith.

14. The computing system of claim 11 wherein the one or more computing platforms comprise one or more of a handheld device, a personal computer, a server, a network appliance, a piece of networking equipment, a single computing platform, or a distributed computing platform.

15. The computing system of claim 11 wherein the one or more computing platforms are deployed in a network including a plurality of additional computing platforms, first ones of the additional computing platforms corresponding to additional verified operating environments configured to process the title objects, wherein the one or more computing platforms are configured to interoperate with the first additional computing platforms to facilitate redemption of the rights represented by the title objects, and wherein second ones of the additional computing platforms correspond to unverified operating environments intervening between the one or more computing platforms and at least some of the first additional computing platforms.

16. The computing system of claim 11 wherein a first one of the integrity-verified components is configured to instantiate a user interface configured to facilitate interaction by a user with selected ones of the title objects associated with the user, and wherein the user interface includes a first presentation mode in which a tab corresponding to the user interface is presented at an edge of a display window, and a second presentation mode in which a user interface window connected to the tab is overlaid on the display window, the user interface window including user interface objects configured to facilitate interaction by the user with the selected title objects, wherein selection of the tab results in the user interface window appearing to slide in to or out from the edge of the display window.

17. A computing system comprising one or more computing platforms configured to instantiate one or more verified operating environments for processing title objects, each title object comprising a digital bearer instrument representing at least one right which may be redeemed by presentation of the title object to a title-enabled process, each title object identifying at least one of the one or more verified operating environments, the one or more computing platforms being configured to instantiate each verified operating environment by selectively instantiating a plurality of integrity-verified components according to a corresponding predefined operating context which specifies the verified operating environment, the plurality of integrity-verified components being configured to facilitate redemption of the rights represented by the title objects identifying the corresponding verified operating environment, wherein the selectively instantiated integrity-verified components cannot be undetectably altered.

18. The computing system of claim 17 wherein each of the title objects identifies the operating context corresponding to the verified operating environment identified by the title object, and wherein the one or more computing platforms are configured to instantiate the one or more verified operating environments with reference to the operating contexts identified by the title objects.

19. The computing system of claim 17 wherein the one or more computing platforms are configured to instantiate a single verified operating environment with reference to the corresponding operating context.

20. The computing system of claim 17 wherein the one or more computing platforms are configured to instantiate the plurality of integrity-verified components using digital signatures and manifests.

21. The computing system of claim 17 wherein the one or more computing platforms comprise one or more of a handheld device, a personal computer, a server, a network appliance, a piece of networking equipment, a single computing platform, or a distributed computing platform.

22. The computing system of claim 17 wherein a first one of the title objects identifies a plurality of verified operating environments each of which corresponds to a different operating context, each of the verified operating environments identified by the first title object corresponding to a different right represented by the first title object, and wherein the one or more computing platforms are configured to instantiate each of the verified operating environments with reference to one of the operating contexts.

23. The computing system of claim 17 wherein a first one of the integrity-verified components is configured to instantiate a user interface configured to facilitate interaction by a user with selected ones of the title objects associated with the user, wherein the user interface includes a first presentation mode in which a tab corresponding to the user interface is presented at an edge of a display window, and a second presentation mode in which a user interface window connected to the tab is overlaid on the display window, the user interface window including user interface objects configured to facilitate interaction by the user with the selected title objects, wherein selection of the tab results in the user interface window appearing to slide in to or out from the edge of the display window.

24. A system for processing digital bearer instruments, comprising:

at least one title expressing at least one right; and

at least one operating context corresponding to said right, said context being configured to provide an operating environment effective to process said at least one right, and said operating context further being selected from the group consisting of;

embedded, named, and referenced operating contexts; and

said operating environment being selected from the group consisting of;

assured, cryptographically assured, defined, assured and defined, and cryptographically assured and defined operating environments.

25. The system of claim 24 wherein said operating context is one of embedded within the title, named by the title, or referenced by the title.

26. The system of claim 24 wherein said operating environment is one or more of assured, cryptographically assured, defined by an operating context, both assured and defined by an operating context, statically configured in accordance with an operating context, dynamically configured in accordance with an operating context, dynamically loaded or unloaded in accordance with an operating context.

27. The system of claim 24 further comprising a user interface configured to allow a user to interact with said operating environment.

28. The system of claim 27 wherein said user interface further includes a slide-out window.

29. The system of claim 27 wherein said operating context is configured to control aspects of the configuration of the user interface.

30. The system of claim 27 wherein said user interface is configured to provide a presentation that is substantially coordinated with at least an aspect of said title.

31. The system of claim 24 wherein said operating environment is configured to process said at least one right of said title using an accountless check-out procedure.

32. The system of claim 24 wherein said operating environment is further configured to review said operating context upon presentation of a title.

33. The system of claim 32 wherein said operating environment is configured to determine whether said operating environment can process said at least one title.

34. The system of claim 33 wherein said operating environment is configured to determine whether one or more additional objects require configuration or instantiation to enable said operating environment to process said at least one title.

35. The system of claim 34 wherein said operating environment is configured to configure or instantiate one or more additional objects required to enable said operating environment to process said at least one title.