Method, system, and apparatus for providing secure access to a digital work
AssigneeMicrosoft Corporation
InventorJohn D. DeTreville
Life of this patent
Estimating the term…
Abstract
A method, system, and apparatus are provided for securely accessing a digital work, such as digital movie, music file, photo, or other type of digital media. Provider contexts, requester contexts, and exporting contexts exchange logic statements as defined by a distributed logic-based programming language. Logic statements may define trust, delegation, and other security relationships. Decisions regarding access to a digital work are made by a provider context based upon locally stored logic statements and other logic statements imported from other contexts. If the logic statements satisfy a security policy, also defined in terms of logic statements, access is granted to the digital work. Otherwise, access to the digital work is denied.
Claims32
A system for providing secure access to a digital work, comprising:
- a provider context operative to store one or more logic statements defining a security policy for accessing the digital work, to receive a request from a requester context for access to the digital work, to store one or more logic statements imported from the requester context, and to evaluate the security policy with the stored logic statements to determine whether access to the digital work may be granted in response to the request;
- and
- a requester context operative to transmit a request to access the digital work to the provider context, and to export one or more logic statements to the provider context.
A method for providing secure access to a digital work, comprising:
- storing at a provider context one or more logic statements that define a security policy for access to the digital work;
- receiving a request to access the digital work from a requester context;
- importing one or more additional logic statements from the requester context;
- merging the logic statements stored at the provider context and the additional logic statements received from the provider context to create a merged set of logic statements;
- and
- evaluating the security policy with the merged group of logic statements to determine whether access to the digital work may be granted in response to the request.
An apparatus for providing secure access to a digital work, comprising:
- a server computer operative to store one or more logic statements that define a security policy for access to the digital work, to import one or more additional logic statements from a client computer, to receive a request to access the digital work from the client computer, to evaluate the security policy with the logic statements received from the client computer to determine whether access to the digital work may be granted, and, in response to determining that access may be granted, to allow the client computer to access the digital work.
Dependencies are inferred from the claim text.