Accessing in a rights locker system for digital content access control

• US 7,398,557 B2
• Filed: 10/15/2003
• Issued: 07/08/2008
• Est. Priority Date: 09/13/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard K.
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): Cervetti; David Garcia
• Application Number:
  US10/687,217
• Publication Number:
  US 20040139207A1
• Time in Patent Office: 1,728 Days
• Field of Search: 726/27, 726/26, 726/29, 380/201
• US Class Current: 726/29
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

Access to digital content may be controlled by determining digital content to be made accessible via a rights locker describing a user'"'"'s access rights for digital content associated with the rights locker, determining enrollment authentication data, and sending a rights locker enrollment request to a rights locker provider, where the rights locker enrollment request comprises a digital content request and the enrollment authentication data. An authenticated rights locker access request is received in response to the sending, where the authenticated rights locker access request is for subsequent use in accessing digital content associated with the rights locker.

Claims

1. A method for digital content access control, comprising:

determining, on a user device, digital content to be made accessible via a rights locker wherein said rights locker comprises an entity, different from said user device, providing a description of a user'"'"'s access rights for digital content and controlling access to the description;

determining, on said user device, enrollment authentication data for use by a rights locker provider;

sending, from said user device to said right locker provider for the rights locker, a rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

receiving, on said user device, an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

2. The method of claim 1 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

3. The method of claim 1 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

4. The method of claim 3 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

5. The method of claim 3 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

6. The method of claim 1 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

7. The method of claim 1, further comprising storing at least part of said authenticated rights locker access request in a bookmark on said user device.

8. The method of claim 1 wherein said authenticated rights locker access request is embedded in a Web cookie.

9. The method of claim 1 wherein said authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

10. A method for digital content access control, comprising:

determining, on a user device, a digital content specification and associated authenticated rights locker access request;

sending, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

receiving, on said user device from said rights locker provider, an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

sending, from said user device to a digital content repository, said authenticated digital content request; and

receiving, on said user device from said digital content repository, said digital content in response to said sending said authenticated digital content request.

11. The method of claim 10 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

12. The method of claim 10, further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

13. The method of claim 10 wherein said new authenticated rights locker access request is embedded in a Web cookie.

14. The method of claim 10 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

15. A method for digital content access control, comprising:

determining, on a user device, a digital content specification and associated authenticated rights locker access request;

sending, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

receiving, on said user device from said rights locker provider, a new authenticated rights locker access request in response to said sending; and

receiving, on said user device from a digital content repository, said digital content in response to said sending.

16. The method of claim 15 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

17. The method of claim 15, further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

18. The method of claim 15 wherein said new authenticated rights locker access request is embedded in a Web cookie.

19. The method of claim 15 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

20. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining, on a user device, digital content to be made accessible via a rights locker wherein said rights locker comprises an entity, different from said user device, providing a description of a user'"'"'s access rights for digital content and controlling access to the description;

determining, on said user device, enrollment authentication data for use by a rights locker provider;

sending, from said user device to said right locker provider for the rights locker, a rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

receiving, on said user device, an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

21. The program storage device of claim 20 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

22. The program storage device of claim 20 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

23. The program storage device of claim 22 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

24. The program storage device of claim 22 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

25. The program storage device of claim 20 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

26. The program storage device of claim 20, said method further comprising storing at least part of said authenticated rights locker access request in a bookmark on said user device.

27. The program storage device of claim 20 wherein said authenticated rights locker access request is embedded in a Web cookie.

28. The program storage device of claim 20 wherein said authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

29. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining, on a user device, a digital content specification and associated authenticated rights locker access request;

sending, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

receiving, on said user device from said rights locker provider, an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

sending, from said user device to a digital content repository, said authenticated digital content request; and

receiving, on said user device from said digital content repository, said digital content in response to said sending said authenticated digital content request.

30. The program storage device of claim 29 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

31. The program storage device of claim 29, said method further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

32. The program storage device of claim 29 wherein said new authenticated rights locker access request is embedded in a Web cookie.

33. The program storage device of claim 29 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

34. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining, on a user device, a digital content specification and associated authenticated rights locker access request;

sending, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

receiving, on said user device from said rights locker provider, a new authenticated rights locker access request in response to said sending; and

receiving, on said user device from a digital content repository, said digital content in response to said sending.

35. The program storage device of claim 34 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

36. The program storage device of claim 34, said method further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

37. The program storage device of claim 34 wherein said new authenticated rights locker access request is embedded in a Web cookie.

38. The program storage device of claim 34 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

39. A user device for digital content access control, comprising:

means for determining, on said user device, digital content to be made accessible via a rights locker wherein said rights locker comprises an entity, different from said user device, providing a description of a user'"'"'s access rights for digital content and controlling access to the description;

means for determining, on said user device, enrollment authentication data for use by a rights locker provider;

means for sending, from said user device to said right locker provider for the rights locker, a rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

means for receiving, on said user device, an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

40. The user device of claim 39 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

41. The user device of claim 39 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

42. The user device of claim 41 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

43. The user device of claim 41 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

44. The user device of claim 39 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

45. The user device of claim 39, further comprising means for storing at least part of said authenticated rights locker access request in a bookmark on said user device.

46. The user device of claim 39 wherein said authenticated rights locker access request is embedded in a Web cookie.

47. The user device of claim 39 wherein said authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

48. A user device for digital content access control, comprising:

means for determining, on said user device, a digital content specification and associated authenticated rights locker access request;

means for sending, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

means for receiving, on said user device from said rights locker provider, an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

means for sending, from said user device to a digital content repository, said authenticated digital content request; and

means for receiving, on said user device from said digital content repository, said digital content in response to said sending said authenticated digital content request.

49. The user device of claim 48 wherein

said user device further comprises means for determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said means for sending further comprises means for sending said one or more delivery parameters.

50. The user device of claim 48, further comprising means for storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

51. The user device of claim 48 wherein said new authenticated rights locker access request is embedded in a Web cookie.

52. The user device of claim 48 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

53. A user device for digital content access control, comprising:

means for determining, on said user device, a digital content specification and associated authenticated rights locker access request;

means for sending, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

means for receiving, on said user device from said rights locker provider, a new authenticated rights locker access request in response to said sending; and

means for receiving, on said user device from a digital content repository, said digital content in response to said sending.

54. The user device of claim 53 wherein

said user device further comprises means for determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said means for sending further comprises means for sending said one or more delivery parameters.

55. The user device of claim 53, further comprising means for storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

56. The user device of claim 53 wherein said new authenticated rights locker access request is embedded in a Web cookie.

57. The user device of claim 53 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

58. A user device for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine, on said user device, digital content to be made accessible via a rights locker wherein said rights locker comprises an entity, different from said user device, providing a description of a user'"'"'s access rights for digital content and controlling access to the description;

determine, on said user device, enrollment authentication data for use by a rights locker provider;

send, from said user device to said right locker provider for the rights locker, a rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

receive, on said user device, an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

59. The user device of claim 58 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

60. The user device of claim 58 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

61. The user device of claim 60 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

62. The user device of claim 60 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

63. The user device of claim 58 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

64. The user device of claim 58 wherein said user device comprises a smart card.

65. The user device of claim 64 wherein said smart card comprises a Java Card™

technology-enabled smart card.

66. The user device of claim 64 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

67. The user device of claim 64 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

68. The user device of claim 64 wherein said smart card comprises a WIM (Wireless Interface Module).

69. The user device of claim 64 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

70. The user device of claim 64 wherein said smart card comprises a UIM (User Identity Module).

71. The user device of claim 64 wherein said smart card comprises a R-UIM (Removable User Identity Module).

72. The user device of claim 58 wherein said processor is further configured to store at least part of said authenticated rights locker access request in a bookmark on said user device.

73. The user device of claim 58 wherein said authenticated rights locker access request is embedded in a Web cookie.

74. The user device of claim 58 wherein said authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

75. A user device for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine, on said user device, a digital content specification and associated authenticated rights locker access request;

send, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

receive, on said user device from said rights locker provider, an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

send, from said user device to a digital content repository, said authenticated digital content request; and

receive, on said user device from said digital content repository, said digital content in response to said sending said authenticated digital content request.

76. The user device of claim 75 wherein

said processor is further configured to determine one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

77. The user device of claim 75 wherein said user device comprises a smart card.

78. The user device of claim 77 wherein said smart card comprises a Java Card™

technology-enabled smart card.

79. The user device of claim 77 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

80. The user device of claim 77 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

81. The user device of claim 77 wherein said smart card comprises a WIM (Wireless Interface Module).

82. The user device of claim 77 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

83. The user device of claim 77 wherein said smart card comprises a UIM (User Identity Module).

84. The user device of claim 77 wherein said smart card comprises a R-UIM (Removable User Identity Module).

85. The user device of claim 75 wherein said processor is further configured to store at least part of said new authenticated rights locker access request in a bookmark on said user device.

86. The user device of claim 75 wherein said new authenticated rights locker access request is embedded in a Web cookie.

87. The user device of claim 75 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.

88. A user device for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine, on said user device, a digital content specification and associated authenticated rights locker access request;

send, from said user device to a rights locker provider of rights lockers, said authenticated rights locker access request and said digital content specification;

receive, on said user device from said rights locker provider, a new authenticated rights locker access request in response to said sending; and

receive, on said user device from a digital content repository, said digital content in response to said sending.

89. The user device of claim 88 wherein

said processor is further configured to determine one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

90. The user device of claim 88 wherein said user device comprises a smart card.

91. The user device of claim 90 wherein said smart card comprises a Java Card™

technology-enabled smart card.

92. The user device of claim 90 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

93. The user device of claim 90 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

94. The user device of claim 90 wherein said smart card comprises a WIM (Wireless Interface Module).

95. The user device of claim 90 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

96. The user device of claim 90 wherein said smart card comprises a UIM (User Identity Module).

97. The user device of claim 90 wherein said smart card comprises a R-UIM (Removable User Identity Module).

98. The user device of claim 88 wherein said processor is further configured to store at least part of said new authenticated rights locker access request in a bookmark on said user device.

99. The user device of claim 88 wherein said new authenticated rights locker access request is embedded in a Web cookie.

100. The user device of claim 88 wherein said new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol Response message.