System and method for securing the life-cycle of user domain rights objects
AssigneeGoogle Technology Holdings LLC
InventorDavid W. Kravitz
Life of this patent
Estimating the term…
Abstract
In a method for enabling support for backwards compatibility in a User Domain, in one of a Rights Issuer (RI) and a Local Rights Manager (LRM), a Rights Object Encryption Key (REK) and encrypted REK are received from an entity that generated a User Domain Authorization for the one of the RI and the LRM and the REK is used to generate a User Domain Rights Object (RO) that includes the User Domain Authorization and the encrypted REK.
Claims15
A downstream distribution system for digital rights management, the downstream distribution system comprising:
- a local rights manager/downstream rights issuer (LRM/DRI) configured to receive, from an upstream distribution system, an upstream license and protected content and to translate the upstream license and the protected content for use by one or more end user communication devices in communication with the downstream distribution system;
- and
- a domain enforcement agent (DEA) configured to manage a user domain with which the one or more end user communication devices are associated by controlling sharing of the translated upstream license and the translated protected content to the one or more end user communication devices,
- wherein the DEA signs an attribute certificate identifying the user domain, wherein the attribute certificate is provisioned to the LRM/DRI, wherein the LRM/DRI validates that the one or more end user communication devices are in the user domain identified by the attribute certificate using an identity certificate including a public key corresponding to a private key associated with the LRM/DRI.
A downstream distribution system for digital rights management, the downstream distribution system comprising:
- a local rights manager/downstream rights issuer (LRM/DRI) configured to:
- receive, from an upstream distribution system, an upstream license and protected content;
- translate the upstream license and the protected content for use by one or more end user communication devices in communication with the downstream distribution system;
- and
- issue user domain rights objects (ROs) to the one or more end user communication devices for the translated upstream license and the translated protected content, wherein the user domain ROs correspond to a user domain that includes the one or more end user communication devices,
- wherein a domain enforcement agent (DEA) signs an attribute certificate identifying the user domain, wherein the attribute certificate is provisioned to the LRM/DRI, wherein the LRM/DRI validates that the one or more end user communication devices are in the user domain identified by the attribute certificate using an identity certificate including a public key corresponding to a private key associated with the LRM/DRI.
A downstream distribution system for digital rights management, the downstream distribution system comprising:
- a domain enforcement agent (DEA) configured to manage a user domain with which one or more end user communication devices are associated by:
- procuring a user domain authorization (UDA) associated with the user domain from a domain authority in communication with the downstream distribution system, wherein the UDA is signed by the domain authority;
- and
- controlling sharing of translated upstream license and translated protected content to the one or more end user communication devices based on the UDA including by signing an attribute certificate associated with the UDA,
- wherein the attribute certificate identifies the user domain, wherein a local rights manager/downstream rights issuer (LRM/DRI) to which the attribute certificate is provisioned validates that the one or more end user communication devices are in the user domain identified by the attribute certificate using an identity certificate including a public key corresponding to a private key associated with the LRM/DRI.
Dependencies are inferred from the claim text.