Embedded content requests in a rights locker system for digital content access control

• US 8,893,303 B2
• Filed: 07/13/2012
• Issued: 11/18/2014
• Est. Priority Date: 09/13/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Oracle America, Inc. (Oracle Corporation)
• Inventors: de Jong, Eduard K.
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): Elmore, Gregory M
• Application Number:
  US13/549,193
• Publication Number:
  US 20120284806A1
• Time in Patent Office: 858 Days
• Field of Search: 726/29, 726/26, 726/27, 726/28, 726/30, 713/182
• US Class Current: 726/29
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

Access to digital content may be controlled by determining a digital content specification and associated authenticated rights locker access request, sending the authenticated rights locker access request and the digital content specification, and receiving a new authenticated rights locker access request and a Web page with clickable links in response to the sending, where at least one of the clickable links is associated with an authenticated digital content request. When an indication of a user selection of one of the clickable links is received, an authenticated digital content request associated with the user-selected clickable link is sent to a digital content repository. The digital content is received in response to the sending of the authenticated digital content request.

Claims

1. An apparatus for accessing digital content in a digital content repository, the apparatus comprising:

a user device associated with a token for use in creating authenticated rights locker access requests, wherein said token is stored remotely from said user device; and

a processor of the user device configured to

determine, at the user device, a digital content specification associated with the digital content stored at the digital content repository, and

send, from the user device to a rights locker provider for a rights locker, a first authenticated rights locker access request and the digital content specification, wherein said first authenticated rights locker access request is based on said token and stored on said user device for providing access by said user device to said rights locker provider for said rights locker, and wherein the first authenticated rights locker access request is in the form of a tokenized URL;

receive, at the user device, from the rights locker provider, in response to said first authenticated rights locker access request and said digital content specification, and based on a status of the token, a second authenticated rights locker access request based on said token and an authenticated digital content request, wherein the second authenticated rights locker access request is in the form of a tokenized URL;

store on the user device at least part of the second authenticated rights locker access request;

receive, at the user device, an indication of a user selection associated with the authenticated digital content request;

send, from the user device, in response to said indication of a user selection, the authenticated digital content request to the digital content repository; and

receive the digital content, at the user device from the digital content repository, in response to said authenticated digital content request.

2. The apparatus of claim 1, wherein the processor is further configured to determine, at the user device, one or more delivery parameters, the one or more delivery parameters indicating where the digital content should be sent, a delivery mechanism, or both;

and

wherein the processor is further configured to send the one or more delivery parameters from the user device to the rights locker with said first authenticated rights locker access request and said digital content specification.

3. The apparatus of claim 1, wherein the processor is further configured to store at least part of the second authenticated rights locker access request in a bookmark on the user device.

4. The apparatus of claim 1, wherein the second authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol (HTTP) Response message.

5. The apparatus of claim 1, wherein the second authenticated rights locker access request is embedded in a Web cookie.

6. The apparatus of claim 1, wherein the user device comprises a smart card.

7. The apparatus of claim 6, wherein the smart card comprises a Java Card™

technology-enabled smart card.

8. The apparatus of claim 6, wherein the smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

9. The apparatus of claim 6, wherein the smart card comprises a SIM (Subscriber Identity Module) card.

10. A method for providing digital content access control for access from a user device to a digital content stored at a digital content repository, the method comprising the steps of:

storing on the user device an authenticated rights locker access request received from a rights locker provider and based on a token stored remotely from said user device, said authenticated rights locker access request providing access by said user device to said rights locker provider for a rights locker, and wherein the authenticated rights locker access request is in the form of a tokenized URL;

determining, at the user device, a digital content specification associated with the digital content stored at the digital content repository;

sending, from the user device to the rights locker provider for the rights locker, the authenticated rights locker access request and the digital content specification;

receiving, at the user device, from the rights locker provider, in response to the authenticated rights locker access request and the digital content specification, and based on a status of the token, a new authenticated rights locker access request based on said token, and an authenticated digital content request, wherein the new authenticated rights locker access request is in the form of a tokenized URL;

storing on said user device at least part of the new authenticated rights locker access request;

receiving, at the user device, an indication of a user selection associated with the authenticated digital content request;

sending, from the user device, in response to said indication of a user selection, the authenticated digital content request to the digital content repository; and

receiving, at the user device from the digital content repository, in response to sending the authenticated digital content request, the digital content.

11. The method of claim 10, wherein the method further comprises determining, at the user device, one or more delivery parameters, the one or more delivery parameters indicating where the digital content should be sent, a delivery mechanism, or both;

and

wherein the sending the authenticated rights locker access request and the digital content specification further comprises sending the one or more delivery parameters.

12. The method of claim 10, wherein the method further comprises storing at least part of the new authenticated rights locker access request in a bookmark on the user device.

13. The method of claim 10, wherein the new authenticated rights locker access request is encapsulated in a Hypertext Transfer Protocol (HTTP) Response message.

14. The method of claim 10, wherein the new authenticated rights locker access request is embedded in a Web cookie.

15. The method of claim 10, wherein the user device comprises a smart card.

16. The method of claim 15, wherein the smart card comprises a Java Card™

technology-enabled smart card.

17. The method of claim 15, wherein the smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

18. The method of claim 15, wherein the smart card comprises a SIM (Subscriber Identity Module) card.

19. A non-transitory computer readable storage media, including instructions stored thereon for accessing digital content stored at a digital content repository, which instructions, when read and executed by one or more processors, cause the one or more processors to perform steps comprising:

storing on a user device an authenticated rights locker access request received from a rights locker provider and based on a token stored remotely from said user device, said authenticated rights locker access request providing access by said user device to said rights locker provider for a rights locker, and wherein the authenticated rights locker access request is in the form of a tokenized URL;

determining, at the user device, a digital content specification associated with the digital content stored at the digital content repository;

sending, from the user device to the rights locker provider for the rights locker, the authenticated rights locker access request and the digital content specification;

receiving, at the user device, from the rights locker provider, in response to the authenticated rights locker access request and the digital content specification, and based on a status of the token, a new authenticated rights locker access request based on said token, and an authenticated digital content request, wherein the new authenticated rights locker access request is in the form of a tokenized URL;

storing on said user device at least part of the new authenticated rights locker access request;

receiving, at the user device, an indication of a user selection associated with the authenticated digital content request;

sending the authenticated digital content request to the digital content repository from the user device, in response to said indication of a user selection; and

receiving the digital content at the user device from the digital content repository, in response to sending the authenticated digital content request.

20. The non-transitory computer readable storage media of claim 19, including instructions stored thereon for accessing a digital content repository storing digital content which when read and executed by one or more processors cause the one or more processors to perform further steps comprising:

determining, at the user device, one or more delivery parameters, the one or more delivery parameters indicating where the digital content should be sent, a delivery mechanism, or both, wherein sending the authenticated rights locker access request and the digital content specification further comprises sending the one or more delivery parameters.