Digital rights management in a mobile communications environment

• US 7,421,411 B2
• Filed: 03/12/2002
• Issued: 09/02/2008
• Est. Priority Date: 07/06/2001
• Status: Expired due to Fees

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Sipponen, Juha-Pekka, Ylitalo, Tapio, Kontio, Markku
• Primary Examiner(s): Worjloh; Jalatee
• Application Number:
  US10/095,062
• Publication Number:
  US 20050004875A1
• Time in Patent Office: 2,366 Days
• Field of Search: 705 50- 59, 713/182, 380200-203, 380/210, 380277-286, 726 26- 33
• US Class Current: 705/52
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/1073 Conversion
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption

Abstract

A method, system, and computer program product for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset. The digital asset is downloaded to the wireless device from any one of a plurality of content servers or other wireless devices. The digital asset comprising a content ID, content encrypted with a content key, and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network. The method, system, and computer program product also creates the digital asset for downloading to a wireless device from one of a plurality of content servers in a network and generates a voucher at the voucher server.

Claims

1. A method comprising:

sending with a wireless device a request for a voucher for protected content of a digital asset encrypted with a content key and information expressed in the voucher for obtaining rights to the content, said digital asset to be downloaded to the wireless device from any one of a plurality of content servers;

receiving with the wireless device a primary and a secondary voucher separate from said protected content;

said primary voucher allowing a user to render content a plurality of times, and including a first pointer to the content, and further including a first reference to the secondary voucher;

said secondary voucher allowing a preview of the content to be distributed to another user, and including a second pointer to the content, and further including a second reference to the secondary voucher allowing the secondary voucher to create a duplicate of itself;

said primary and secondary vouchers having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content; and

restriction information limiting usage of the content;

said primary voucher including transaction information including said content key;

said use information including selective intent rules specifying at least whether no right to copy the content is given to the receiver, whether right to copy the content is relinquished by the sender and given to the receiver, or whether right to copy the content is kept by the sender and also given to the receiver;

accessing the primary voucher in the wireless device to cause a duplicate of the content as a primary content copy to be transmitted to a receiving terminal with the right to copy the content in response to said selective intent rules;

using the first reference in the primary voucher to access the secondary voucher in the wireless device to cause a preview copy of the content to be transmitted to a receiving terminal with no right to copy the content in response to said selective intent rules;

enabling the wireless device to decrypt said encrypted content with said content key; and

interpreting said use information in said vouchers to carry out said selective intent rules.

2. The method of claim 1, wherein the wireless device includes a device ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

recovering said content key if said device ID matches the reference device ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

3. The method of claim 1, wherein the wireless device includes a user ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

recovering said content key if said user ID matches the reference user ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

4. A system comprising:

a memory device; and

a processor disposed in communication with the memory device, the processor configured to;

send a request for a voucher forprotected content of a digital asset encrypted with a content key and information expressed in the voucher for obtaining rights to the content,

said digital asset to be downloaded to the wireless device from any one of a plurality of content servers;

receive with the wireless device a primary and a secondary voucher separate from said protected content;

said primary voucher allowing a user to render content a plurality of times, and including a first pointer to the content, and further including a first reference to the secondary voucher;

said secondary voucher allowing a preview of the content to be distributed to another user, and including a second pointer to the content, and further including a second reference to the secondary voucher allowing the secondary voucher to create a duplicate of itself;

said primary and secondary vouchers having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content; and

restriction information limiting usage of the content;

said primary voucher including transaction information including said content key;

said use information including selective intent rules specifying at least whether no right to copy the content is given to the receiver, whether right to copy the content is relinquished by the sender and given to the receiver, or whether right to copy the content is kept by the sender and also given to the receiver;

access the primary voucher in the wireless device to cause a duplicate of the content as a primary content copy to be transmitted to a receiving terminal with the right to copy the content in response to said selective intent rules;

use the first reference in the primary voucher to access the secondary voucher in the wireless device to cause a preview copy of the content to be transmitted to a receiving terminal with no right to copy the content in response to said selective intent rules;

enable the wireless device to decrypt said encrypted content with said content key; and

interpret said use information in said vouchers to carry out said selective intent rules.

5. The system of claim 4, wherein the wireless device includes a device ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, the processor further configured to:

recover said content key if said device ID matches the reference device ID in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

6. The system of claim 4, wherein the wireless device includes a user ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, the processor is further configured to:

recover said content key if said user ID matches the reference user ID in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

7. A computer program product comprising:

a computer readable medium;

program code in said computer readable medium for sending with a wireless device a request for a voucher for protected content of a digital asset encrypted with a content key and information expressed in the voucher for obtaining rights to the content, said digital asset to be downloaded to the wireless device from any one of a plurality of content servers;

program code in said computer readable medium for receiving with the wireless device a primary and a secondary voucher separate from said protected content;

said primary voucher allowing a user to render content a plurality of times, and including a first pointer to the content, and further including a first reference to the secondary voucher;

said secondary voucher allowing a preview of the content to be distributed to another user, and including a second pointer to the content, and further including a second reference to the secondary voucher allowing the secondary voucher to create a duplicate of itself;

said primary and secondary vouchers having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content; and

restriction information limiting usage of the content;

said primary voucher including transaction information including said content key;

said use information including selective intent rules specifying at least whether no right to copy the content is given to the receiver, whether right to copy the content is relinquished by the sender and given to the receiver, or whether right to copy the content is kept by the sender and also given to the receiver;

program code in said computer readable medium for accessing the primary voucher in the wireless device to cause a duplicate of the content as a primary content copy to be transmitted to a receiving terminal with the right to copy the content in response to said selective intent rules;

program code in said computer readable medium for using the first reference in the primary voucher to access the secondary voucher in the wireless device to cause a preview copy of the content to be transmitted to a receiving terminal with no right to copy the content in response to said selective intent rules;

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with said content key; and

program code in said computer readable medium for interpreting said use information in said vouchers to carry out said selective intent rules.

8. The computer program product of claim 7, wherein the wireless device includes a device ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said device ID matches the reference device ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.

9. The computer program product of claim 7, wherein the wireless device includes a user ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said user ID matches the reference user ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.

10. A method comprising:

sending with a wireless device a request for a voucher for protected content of a digital asset encrypted with a content key and information expressed in the voucher for obtaining rights to the content, said digital asset to be downloaded to the wireless device from any one of a plurality of other wireless devices;

receiving with the wireless device a primary and a secondary separate from said protected content;

said primary voucher allowing a user to render content a plurality of times, and including a first pointer to the content, and further including a first reference to the secondary voucher;

said secondary voucher allowing a preview of the content to be distributed to another user, and including a second pointer to the content, and further including a second reference to the secondary voucher allowing the secondary voucher to create a duplicate of itself;

said primary and secondary vouchers having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content; and

restriction information limiting usage of the content;

said primary voucher including transaction information including said content key;

said use information including selective intent rules specifying at least whether no right to copy the content is given to the receiver, whether right to copy the content is relinquished by the sender and given to the receiver, or whether right to copy the content is kept by the sender and also given to the receiver;

accessing the primary voucher in the wireless device to cause a duplicate of the content as a primary content copy to be transmitted to a receiving terminal with the right to copy the content in response to said selective intent rules;

using the first reference in the primary voucher to access the secondary voucher in the wireless device to cause a preview copy of the content to be transmitted to a receiving terminal with no right to copy the content in response to said selective intent rules;

enabling the wireless device to decrypt said encrypted content with said content key; and

interpreting said use information in said vouchers to carry out said selective intent rules.

11. The method of claim 10, wherein the wireless device includes a device ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

recovering said content key if said device ID matches the reference device ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

12. The method of claim 10, wherein the wireless device includes a user ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

recovering said content key if said user ID matches the reference user ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

13. A system comprising:

a memory device; and

a processor disposed in communication with the memory device, the processor configured to;

send a request for a voucher for protected content of a digital asset encrypted with a content key and information expressed in the voucher for obtaining rights to the content,

said digital asset to be downloaded to the wireless device from any one of a plurality of other wireless devices;

receive with the wireless device a primary and a secondary voucher separate from said protected content;

said primary voucher allowing a user to render content a plurality of times, and including a first pointer to the content, and further including a first reference to the secondary voucher;

said secondary voucher allowing a preview of the content to be distributed to another user, and including a second pointer to the content, and further including a second reference to the secondary voucher allowing the secondary voucher to create a duplicate of itself;

said primary and secondary vouchers having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content; and

restriction information limiting usage of the content;

said primary voucher including transaction information including said content key;

said use information including selective intent rules specifying at least whether no right to copy the content is given to the receiver, whether right to copy the content is relinquished by the sender and given to the receiver, or whether right to copy the content is kept by the sender and also given to the receiver;

access the primary voucher in the wireless device to cause a duplicate of the content as a primary content copy to be transmitted to a receiving terminal with the right to copy the content in response to said selective intent rules;

use the first reference in the primary voucher to access the secondary voucher in the wireless device to cause a preview copy of the content to be transmitted to a receiving terminal with no right to copy the content in response to said selective intent rules;

enable the wireless device to decrypt said encrypted content with said content key; and

interpret said use information in said vouchers to carry out said selective intent rules.

14. The system of claim 13, wherein the wireless device includes a device ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, the processor further configured to:

recover said content key if said device ID matches the reference device ID in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

15. The system of claim 13, wherein the wireless device includes a user ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, the processor further configured to:

recover said content key if said user ID matches the reference user ID in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

16. A computer program product comprising:

a computer readable medium;

program code in said computer readable medium for sending with a wireless device a request for a voucher for protected content of a digital asset encrypted with a content key and information expressed in the voucher for obtaining rights to the content, said digital asset to be downloaded to the wireless device from any one of a plurality of other wireless devices;

program code in said computer readable medium for receiving with the wireless device a primary and a secondary voucher separate from said protected content;

said primary voucher allowing a user to render content a plurality of times, and including a first pointer to the content, and further including a first reference to the secondary voucher;

said secondary voucher allowing a preview of the content to be distributed to another user, and including a second pointer to the content, and further including a second reference to the secondary voucher allowing the secondary voucher to create a duplicate of itself;

said primary and secondary vouchers having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content; and

restriction information limiting usage of the content;

said primary voucher including transaction information including said content key;

said use information including selective intent rules specifying at least whether no right to copy the content is given to the receiver, whether right to copy the content is relinquished by the sender and given to the receiver, or whether right to copy the content is kept by the sender and also given to the receiver;

program code in said computer readable medium for accessing the primary voucher in the wireless device to cause a duplicate of the content as a primary content copy to be transmitted to a receiving terminal with the right to copy the content in response to said selective intent rules;

program code in said computer readable medium for using the first reference in the primary voucher to access the secondary voucher in the wireless device to cause a preview copy of the content to be transmitted to a receiving terminal with no right to copy the content in response to said selective intent rules;

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with said content key; and

program code in said computer readable medium for interpreting said use information in said vouchers to carry out said selective intent rules.

17. The computer program product of claim 16, wherein the wireless device includes a device ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said device ID matches the reference device ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.

18. The computer program product of claim 16, wherein the wireless device includes a user ID and wherein the primary voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said user ID matches the reference user ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.