Drm System For Devices Communicating With A Portable Device

• US 20080109882A1
• Filed: 08/30/2005
• Published: 05/08/2008
• Est. Priority Date: 09/02/2004
• Status: Active Grant

• Current Assignee: Thales DIS France SA
• Original Assignee: Axalto S A
• Inventors: Mahalal, Ilan, Tales, Alain
• Granted Patent: US 7,937,750 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/1014 to tokens

Abstract

Access of a first device, communicating with a second, portable device, to digital content is controlled by authentication of the first device by a remote server; upon successful authentication of the first device by the remote server, securely providing by the remote server credentials to the portable device, the credentials enabling the portable device to authenticate the first device; securely providing by the remote server rights objects to the portable device, the rights objects comprising usage rights and information which is necessary to access the content; authentication of the first device by the portable device using the credentials received from the remote server; and, upon successful authentication of the first device by the portable device, delivering by the portable device to the first device the information which is necessary to access the content.

Claims

1. A method for controlling access of a first device to digital content, the first device communicating with a second, portable device, the method comprising:

authentication of the first device by a remote server;

upon successful authentication of the first device by the remote server, securely providing by the remote server credentials to the portable device, the credentials enabling the portable device to authenticate the first device;

securely providing by the remote server rights objects to the portable device, the rights objects comprising usage rights and information which is necessary to access the content;

authentication of the first device by the portable device using the credentials received from the remote server; and

upon successful authentication of the first device by the portable device, delivering by the portable device to the first device the information which is necessary to access the content.

2. The method according to claim 1, wherein the credentials, which are securely stored on the first device, are used for authentication of the first device by the remote server and in that the credentials are used, together with the credentials provided to the portable device by the remote server for authentication of the first device by the portable device.

3. The Method according to claim 1 or 2, wherein the credentials which are securely stored on the portable device are used by the remote server for securely providing to the portable device the credentials that enable the portable device to authenticate the first device and for securely providing to the portable device the rights objects.

4. The method according to claim 1 or 2, wherein the first device delivers to the portable device information about the intended usage of the content and in that the portable device delivers to the first device the information which is necessary to access the content only if the intended usage is covered by the usage rights comprised by the rights objects.

5. The Method according to claim 1 or 2, wherein together with the information which is necessary to access the content at least parts of the usage rights comprised by the rights objects are delivered to the first device by the portable device and in that the first device accesses the content only if the intended usage is covered by the usage rights delivered to the first device.

6. The method according to claim 1, wherein the first device is a mobile telephone, a PDA, a PC, or a consumer electronics device with multimedia and networking capabilities.

7. The method according to claim 1, wherein the portable device is a smart card or a Multi Media Memory card.

8. The method according to claim 1, wherein the rights objects facilitate access to protected broadcast or streaming video media or to protected digital media that has previously been delivered to the first device.

11. The device according to claim 8 wherein the device is a portable device.

13. The device according to claim 8 wherein the device is a server capable to perform the actions of a remote server.

14. The device according to claim 13 further comprising means for issuing rights objects.

9. A computer readable storage medium storing a computer program element, executable on a device for controlling access to digital content, comprising:

a computer program element having instructions to cause the device to perform;

authentication of the first device by a remote server;

upon successful authentication of the first device by the remote server, securely providing by the remote server credentials to the portable device, the credentials enabling the portable device to authenticate the first device;

securely providing by the remote server rights objects to the portable device, the rights objects comprising usage rights and information which is necessary to access the content;

authentication of the first device by the portable device using the credentials received from the remote server; and

upon successful authentication of the first device by the portable device, delivering by the portable device to the first device the information which is necessary to access the content.

10. The device according to claim 9 further comprising means to render digital content.

15. A System comprising a device according to claim 10, a portable device according to claim 12 and a server according to claim 14.

12. (canceled)