Extensible media rights

• US 8,781,969 B2
• Filed: 07/13/2010
• Issued: 07/15/2014
• Est. Priority Date: 05/20/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Khandelwal, Vikas, Oliveira, Eduardo P., Van Dyke, Clifford P., VanAntwerp, Mark D., Alkove, James M., Storm, Clifford P.
• Primary Examiner(s): Ravetti, Dante
• Application Number:
  US12/835,569
• Publication Number:
  US 20100280954A1
• Time in Patent Office: 1,463 Days
• Field of Search: 705/51, 705/16, 705/21, 705/59, 705/71, 308/44, 308/262, 308/278, 308/279
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06

Abstract

A DRM System. A DRM system comprising a service provider, a CE device coupled to the service provider, and an XMR license disposed upon the CE device.

Claims

1. A computer implemented method of accessing rights-protected data at a client receiver device, the computer implemented method comprising:

receiving, by the client receiver device, an extensible media rights (XMR) license;

bonding, by the client receiver device, the XMR license to the device;

receiving, by the client receiver device, a request to access content;

parsing, by the client receiver device, the XMR license;

extracting, by the client receiver device, from the parsed XMR license one more objects, including;

a minimum environment restriction object, the minimum environment restriction object indicating first minimum version of a revocation list that the client receiver device must adhere to before accessing the content, and

a device key object, defines a public key of the client receiver device to which the XMR license is bound to;

retrieving, by the client receiver device, the first minimum version of the revocation list indicated by the minimum environment restriction object;

accessing, by the client receiver device, a device certificate, the device certificate including a second minimum version of a revocation list and a public key of the client receiver device;

comparing, by the client receiver device, the retrieved first minimum version of the revocation list with the second minimum version of a revocation list stored in the device certificate;

extracting from the parsed XMR license the device key object;

determining, by the client receiver device, that the second minimum version of the revocation list stored in the device certificate is greater than or equal to the retrieved first minimum version of the revocation list from the parsed XMR license and the public key of the client receiver device is associated with the device key object; and

based on the determining that the second minimum version of the revocation list stored in the device certificate is greater than or equal to the retrieved first minimum version of the revocation list from the parsed XMR license and the public key of the client receiver device is associated with, the device key object, accessing the content.

2. The computer implemented method of claim 1, wherein the minimum environment restriction object also indicates a lowest security level that the client receiver device must adhere to before it can access the content.

3. The computed implemented method of claim 2, wherein the lowest security level is determined by comparing a security value from the XMR license with a security value from a digital certificate that uniquely identifies the client receiver device.

4. The computer implemented method of claim 3, further comprising:

determining that the digital certificate is greater than or equal to the security value from the XMR license;

based on the determining that the digital certificate is greater than or equal to the security value from the XMR license, the XMR license is used to access the content.

5. The computer implemented method of claim 1, wherein the minimum environment restriction object indicates a minimum application revocation list version.

6. The computer-implemented method of claim 1, wherein a content key is combined with an integrity key to sign in the XMR license.

7. The computer implemented method of claim 1, wherein the device key object indicates a symmetric cipher type that defines how to interpret decrypted key data.

8. The computer implemented method of claim 1, wherein the minimum environment restriction object is a child object of a Global Policy Container XMR object.

9. The computer implemented method of claim 8, wherein the device key object is a child object of a Key Material Container XMR object.

10. The computer implemented method of claim 9, wherein the Global Policy Container XMR object and the Key Material Container XMR object are nested in an outer container object of the XMR license.

11. A computer system for accessing rights-protected data at a client receiver device, the computer system comprising:

at least one processor; and

at least one computer storage device, communicatively coupled to the at least one processor and containing computer-readable instructions that, when executed by the at least one processor, causes the one processor to performs a method comprising;

receiving an extensible media rights (XMR) license;

bonding, by the client receiver device, the XMR license to the device;

receiving a request to access content;

parsing the XMR license;

extracting from the parsed XMR license one more objects, including;

a minimum environment restriction object, the minimum environment restriction object indicating first minimum version of a revocation list that the client receiver device must adhere to before accessing the content, and

a device key object, defines the public key of the client receiver device to which the XMR license is bound to;

accessing a device certificate, the device certificate including a second minimum version of a revocation list and a public key of the client receiver device;

comparing the retrieved first minimum version of the revocation list with the second minimum version of a revocation list stored in the device certificate;

extracting from the parsed XMR license the device key object;

determining that the second minimum version of the revocation list stored in the device certificate is greater than or equal to the retrieved first minimum version of the revocation list from the parsed XMR license and that the public key of the client receiver device is associated with, defined by the device key object; and

based on the determining that the second minimum version of the revocation list stored in the device certificate is greater than or equal to the retrieved first minimum version of the revocation list from the parsed XMR license and the public key of the client receiver device is associated with the device key object, accessing the content.

12. The computer system of claim 11, wherein the minimum environment restriction object also indicates a lowest security level that the client receiver device must adhere to before it can access the content.

13. The computer system of claim 12, wherein the lowest security level is determined by comparing a security value from the XMR license with a security value from a digital certificate that uniquely identifies the client receiver device.

14. The computer system of claim 13,

determining that the digital certificate is greater than or equal to the security value from the XMR license;

based on the determining that the digital certificate is greater than or equal to the security value from the XMR license, the XMR license is used to access the content.

15. The computer system of claim 11, wherein the minimum environment restriction object indicates a minimum application revocation list version.

16. The computer system of claim 11, wherein a content key is combined with a integrity key to sign the XMR license.

17. The computer system of claim 11, wherein the device key object indicates a symmetric cipher type that defines how to interpret decrypted key data.

18. The computer system of claim 11, wherein the minimum environment restriction object is a child object of a Global Policy Container XMR object.

19. The computer system of claim 18, wherein the device key object is a child object of a Key Material Container XMR object.

20. The computer system of claim 19, wherein the Global Policy Container XMR object and the Key Material Container XMR object are nested in an outer container object of the XMR license.