System And Method For Digital Rights Management With Delegated Authorization For Content Access

• US 20130132232A1
• Filed: 08/21/2009
• Published: 05/23/2013
• Est. Priority Date: 04/22/2009
• Status: Abandoned Application

• Current Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Pestoni, Florian, Shetty, Pritham, Agrawal, Sunil C., Nadell, Katherine K.
• Application Number:
  US12/545,578
• Publication Number:
  US 20130132232A1
• Time in Patent Office: Days
• US Class Current: 705/26.25
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

Various embodiments of a system and method for digital rights management with delegated authorization for content access are described. Such embodiments may include a runtime component configured to receive protected content. The runtime component may be configured to submit a request for a delegation token to a first entity, such as a content merchant or some other entity. The runtime component may be configured to receive the delegation token from the first entity. The runtime component may also be configured to submit a request for a content license for the protected content to a second entity, such as an access coordinator or some other entity. The submitted request may include the received delegation token. The runtime component may be configured to receive the content license from the second entity. The runtime component may also be configured to provide access to the protected content in accordance with the received content license.

Claims

1. A computer-implemented method, comprising:

receiving protected content on a computer system, the computer system accessible to a user;

receiving, at the computer system, a delegation token provided by a first entity, wherein receipt of the delegation token indicates the first entity determined the user is authorized to consume said protected content, wherein the delegation token is applicable for providing access to said protected content and additional protected content;

receiving, at the computer system, a content license for the protected content from a second entity, wherein said second entity operates under the control of an entity distinct from the first entity;

in response to receiving both the delegation token and the content license at the computer system, providing access to the protected content on the computer system.

2. The computer-implemented method of claim 1, wherein receipt of the delegation token indicates the first entity determined the user engaged in one or more of:

a purchase of said protected content, a rental of said protected content, and a subscription to said protected content.

3. The computer-implemented method of claim 1, wherein providing access to the protected content comprises providing access to the protected content in accordance with one or more usage rules.

4. The computer-implemented method of claim 3, wherein said one or more usage rules comprise at least one rule for one or more of:

restricting access to the protected content to a particular time period, restricting viewing of the protected content, restricting copying of the protected content, and restricting the distribution of the protected content.

5. The computer-implemented method of claim 1, wherein said receiving the protected content comprises receiving the protected content from a content distribution network (CDN).

6. The computer-implemented method of claim 1, wherein the method comprises:

prior to receiving said content license, submitting a request for that content license to the second entity, the request including the delegation token.

7. The computer-implemented method of claim 6, further comprising:

submitting a request for a second content license for the additional protected content, wherein the request for a second content license comprises the same delegation token received from the first entity;

receiving the second content license; and

providing access to the additional protected content in accordance with the received second content license.

8. The computer-implemented method of claim 1, further comprising:

subsequent to determining that the delegation token has expired, receiving a new delegation token; and

providing access to the protected content in response to receiving the content license and the new delegation token.

9. The computer-implemented method of claim 1, wherein at least a portion of the received content license is encrypted with a public key that corresponds to a private key within the received delegation token, wherein the method comprises decrypting said at least a portion of the received content license with said private key.

10. The computer-implemented method of claim 1, wherein the delegation token and the content license are part of a common license chain;

wherein the delegation token is a root license of said license chain, wherein the content license is a leaf license of said license chain that includes a pointer to said delegation token.

11. The computer-implemented method of claim 10, wherein the method comprises receiving the content license prior to receiving the delegation token.

12. The computer-implemented method of claim 1, wherein said computer system comprises multiple runtime components for performing different processing tasks, wherein one of said multiple runtime components controls processing of the delegation token and an other one of said multiple runtime component controls processing of the content license.

13-16. -16. (canceled)

17. A system, comprising:

a memory; and

one or more processors coupled to the memory, wherein the memory comprises program instructions executable by the one or more processors to;

receive protected content on said system, the system accessible to a user;

receive on said system a delegation token provided by a first entity, wherein receipt of the delegation token indicates the first entity determined the user is authorized to consume said protected content, wherein the delegation token is applicable for providing access to said protected content and additional protected content;

receive on said system a content license for the protected content from a second entity, wherein said second entity operates under the control of an entity distinct from the first entity;

in response to receiving both the delegation token and the content license on said system, provide access to the protected content on said system.

18. The system of claim 17, wherein receipt of the delegation token indicates the first entity determined the user engaged in one or more of:

a purchase of said protected content, a rental of said protected content, and a subscription to said protected content

19. The system of claim 17, wherein to provide access to the protected content the program instructions are configured to provide access to the protected content in accordance with one or more usage rules.

20. The system of claim 19, wherein said one or more usage rules comprise at least one rule for one or more of:

restricting access to the protected content to a particular time period, restricting viewing of the protected content, restricting copying of the protected content, and restricting the distribution of the protected content.

21. The system of claim 17, wherein to receive the protected content the program instructions are configured to receive the protected content from a content distribution network (CDN).

22. The system of claim 17, wherein the program instructions are configured to:

prior to receiving said content license, submit a request for that content license to the second entity, the request including the delegation token.

23. The system of claim 22, wherein the program instructions are configured to:

submit a request for a second content license for the additional protected content, wherein the request for a second content license comprises the same delegation token received from the first entity;

receive the second content license; and

provide access to the additional protected content in accordance with the received second content license.

24. The system of claim 17, wherein the program instructions are configured to:

subsequent to determining that the delegation token has expired, receive a new delegation token; and

provide access to the protected content in response to receiving the content license and the new delegation token.

25. The system of claim 17, wherein at least a portion of the received content license is encrypted with a public key that corresponds to a private key within the received delegation token, wherein the program instructions are configured to decrypt said at least a portion of the received content license with said private key.

26. The system of claim 17, wherein the delegation token and the content license are part of a common license chain;

wherein the delegation token is a root license of said license chain, wherein the content license is a leaf license of said license chain that includes a pointer to said delegation token.

27. The system of claim 26, wherein the program instructions are configured to receive the content license prior to receiving the delegation token.

28. The system of claim 17, wherein the system comprises multiple runtime components configured to perform different processing tasks, wherein one of said multiple runtime components controls processing of the delegation token and an other one of said multiple runtime component controls processing of the content license.

29-32. -32. (canceled)

33. A computer-readable storage medium, storing program instructions computer-executable on a computer system to:

receive protected content on said computer system, the computer system accessible to a user;

receive on said computer system a delegation token provided by a first entity, wherein receipt of the delegation token indicates the first entity determined the user is authorized to consume said protected content wherein the delegation token is applicable for providing access to said protected content and additional protected content;

receive on said computer system a content license for the protected content from a second entity, wherein said second entity operates under the control of an entity distinct from the first entity;

in response to receiving both the delegation token and the content license on said computer system, provide access to the protected content on said computer system.

34. The medium of claim 33, wherein receipt of the delegation token indicates the first entity determined the user engaged in one or more of:

a purchase of said protected content, a rental of said protected content, and a subscription to said protected content

35. The medium of claim 33, wherein to provide access to the protected content the program instructions are configured to provide access to the protected content in accordance with one or more usage rules.

36. The medium of claim 35, wherein said one or more usage rules comprise at least one rule for one or more of:

restricting access to the protected content to a particular time period, restricting viewing of the protected content, restricting copying of the protected content, and restricting the distribution of the protected content.

37. The medium of claim 33, wherein to receive the protected content the program instructions are configured to receive the protected content from a content distribution network (CDN).

38. The medium of claim 33, wherein the program instructions are configured to:

prior to receiving said content license, submit a request for that content license to the second entity, the request including the delegation token.

39. The medium of claim 38, wherein the program instructions are configured to:

submit a request for a second content license for the additional protected content, wherein the request for a second content license comprises the same delegation token received from the first entity;

receive the second content license; and

provide access to the additional protected content in accordance with the received second content license.

40. The medium of claim 33, wherein the program instructions are configured to:

subsequent to determining that the delegation token has expired, receive a new delegation token; and

provide access to the protected content in response to receiving the content license and the new delegation token.

41. The medium of claim 33, wherein at least a portion of the received content license is encrypted with a public key that corresponds to a private key within the received delegation token, wherein the program instructions are configured to decrypt said at least a portion of the received content license with said private key.

42. The medium of claim 33, wherein the delegation token and the content license are part of a common license chain;

wherein the delegation token is a root license of said license chain, wherein the content license is a leaf license of said license chain that includes a pointer to said delegation token.

43. The medium of claim 42, wherein the program instructions are configured to receive the content license prior to receiving the delegation token.

44. The medium of claim 33, wherein the program instructions are configured to implement multiple runtime components configured to perform different processing tasks, wherein one of said multiple runtime components controls processing of the delegation token and an other one of said multiple runtime component controls processing of the content license.

45-49. -49. (canceled)