INFORMATION SECURITY SYSTEMS AND METHODS

• US 20120260346A1
• Filed: 04/11/2012
• Published: 10/11/2012
• Est. Priority Date: 04/11/2011
• Status: Active Grant

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: CAREY, W. Knox, Nilsson, Jarl
• Granted Patent: US 9,589,110 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Systems and methods for governing derived electronic resources are provided. In one embodiment, a digital resource is associated with one or more rules and a set of one or more computations, wherein the rules correspond to one or more conditions for accessing the digital resource and the computations operate upon the digital resource in order to provide a specific view of the digital resource that differs from the digital resource.

Claims

1. A method for governing the use of a digital resource, the method comprising:

associating one or more rules and a set of one or more computations with the digital resource, wherein the rules correspond to one or more conditions for accessing the digital resource and the computations operate upon the digital resource in order to provide a specific view of the digital resource that differs from the digital resource.

2. The method of claim 1, in which at least one computation associated with the digital resource is associated with a given user in order to limit said user'"'"'s access to the information contained in the digital resource by requiring that the computation be applied to the digital resource before revealing the information to said user.

3. The method of claim 2, in which at least one computation is associated with a set of users rather than an individual user.

4. The method of claim 2, in which the entity whose view is restricted by the computation is a non-human principal, such as a given rendering device.

5. The method of claim 3, in which the set of users is specified by explicitly listing the users for whom the computation applies.

6. The method of claim 3, in which the set of users is specified by providing an attribute common to the set of users, such that the computation is required for any user to whom said attribute applies.

7. The method of claim 1, in which at least one computation, when applied to the digital resource, produces a limited view of said digital resource from which it is not possible to recreate the digital resource.

8. The method of claim 7, in which the limited view computed is dependent upon the user, set of users, or other principal to whom the computation applies.

9. The method of claim 7, in which at least one computation incorporates random or pseudorandom information in order to obscure the original resource.

12. The method of claim 1, further comprising:

receiving a request for associating a new set of computations with the digital resource.

13. The method of claim 12, further comprising:

approving the request for associating the new set of computations with the digital resource.

14. The method of claim 1, further comprising:

using cryptographic techniques to associate computations with the digital resource.

15. The method of claim 14, in which the association is made by creating a digitally signed document consisting of the pairing of a unique representation of the digital resource and a unique representation of the computation to be associated with the digital resource.

16. The method of claim 15, in which the representation of the digital resource is the result of applying a one-way function.

17. The method of claim 16, in which the one-way function comprises the SHA-1 hash function.

18. The method of claim 15, in which the representation of the digital resource is a unique identifier associated with the digital resource.

19. The method of claim 18, in which the unique identifier associated with the digital resource was assigned by a trusted third party.

20. The method of claim 19, in which the trusted third party has made the association between the unique identifier and the digital resource by digitally signing a document containing both the identifier and the digital resource, or a representation of the digital resource.

21. The method of claim 15 in which the representation of the computation to be associated with the digital resource is the computation itself expressed in a machine-readable format.

22. The method of claim 15, in which the representation of the computation to be associated with the digital resource is the result of applying a one-way function to a machine-readable representation of the computation.

23. The method of claim 15, in which the representation of the computation to be associated with the digital resource is a unique identifier associated with the computation.

24. The method of claim 23, in which the unique identifier associated with the computation was assigned by a trusted third party.

25. The method of claim 24, in which the trusted third party has made the association between the unique identifier and the computation by digitally signing a document containing both the identifier and the computation, or a representation of the computation.

10. The method of claim 10, in which pseudorandom information used to obscure the digital resource is based on a deterministic set of seed information.

11. The method of claim 11, in which the deterministic seed information used to generate the pseudorandom information is associated with a given principal such that the same principal always receives the same obscured view of the digital resource.

26. The method of 14, in which the computation is cryptographically associated with a digital resource by packaging a machine-readable representation of the computation in the same secure package used to associate the rules with the digital resource.