Interoperable Systems and Methods for Peer-to-Peer Service Orchestration

A method performed by a computer system, the method comprising:

• receiving, at a host application running on the computer system, a request to access a particular piece of content;
• sending the request and one or more digital objects from the host application to a digital rights management engine;
• receiving, from the digital rights management engine, one or more requests for one or more cryptographic services;
• performing the one or more cryptographic services;
• returning results of the one or more cryptographic services to the digital rights management engine;
• receiving an indication from the digital rights management engine that the request to access the particular piece of content may be granted;
• and
• initiating rendering of the particular piece of content.

A method comprising:

• receiving a request from a host application to determine whether a particular operation on a piece of electronic content is permitted;
• sending a request to a service provided by or on behalf of the host application to verify one or more link objects;
• receiving a response to the request, the response indicating that the one or more link objects are trusted;
• evaluating the one or more link objects in accordance with one or more controls securely associated with the piece of electronic content;
• determining, based at least in part on the evaluating step, that the particular operation is permitted;
• sending an indication to the host application that the particular operation is permitted;
• providing one or more cryptographic keys to the host application or a service operating on behalf of the host application, the one or more cryptographic keys being configured to enable the particular operation to be performed.

A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

• receiving, at a host application running on the computer system, a request to access a particular piece of content;
• sending the request and one or more digital objects from the host application to a digital rights management engine running on the computer system;
• receiving, from the digital rights management engine, one or more requests for one or more cryptographic services;
• performing the one or more cryptographic services;
• returning results of the one or more cryptographic services to the digital rights management engine;
• receiving an indication from the digital rights management engine that the request to access the particular piece of content may be granted;
• and
• initiating rendering of the particular piece of content.

A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

• receiving a request from a host application to determine whether a particular operation on a piece of electronic content is permitted;
• sending a request to a service provided by or on behalf of the host application to verify one or more link objects;
• receiving a response to the request, the response indicating that the one or more link objects are trusted;
• evaluating the one or more link objects in accordance with one or more controls securely associated with the piece of electronic content;
• determining, based at least in part on the evaluating step, that the particular operation is permitted;
• sending an indication to the host application that the particular operation is permitted;
• and
• providing one or more cryptographic keys to the host application or a service operating on behalf of the host application, the one or more cryptographic keys being configured to enable the particular operation to be performed.

A system comprising:

• a user interface;
• a host application, the host application being operable to interact with the user interface and to perform one or more functions necessary to respond to a user's request to access a piece of protected content, the one or more functions including managing interaction with a file system to extract the piece of protected content, the one or more functions further including recognizing a format of the piece of protected content and issuing a request to a digital rights management engine to determine whether permission to access the piece of protected content should be granted;
• a digital rights management engine, the digital rights management engine being operable to evaluate one or more objects to determine whether permission to access the piece of protected content should be granted, the digital rights management engine being further operable to provide one or more keys to the host application, the one or more keys for use in decrypting the piece of protected content;
• a host services module, the host services module being operable to provide the digital rights management engine with access to data managed by the host application;
• a content services module, the content services module being operable to interact with the host application to access the piece of protected content;
• a cryptographic services module, the cryptographic services module being operable to interact with the digital rights management engine and to perform one or more cryptographic operations;
• and
• a media rendering engine, the media rendering engine being operable to interact with the host application to decrypt and render the piece of protected content.