System and method for securing the life-cycle of user domain rights objects
AssigneeMotorola, Inc.
InventorDavid W. Kravitz
Life of this patent
Estimating the term…
Abstract
In a method for enabling support for backwards compatibility in a User Domain, in one of a Rights Issuer (RI) and a Local Rights Manager (LRM), a Rights Object Encryption Key (REK) and encrypted REK are received from an entity that generated a User Domain Authorization for the one of the RI and the LRM and the REK is used to generate a User Domain Rights Object (RO) that includes the User Domain Authorization and the encrypted REK.
Claims30
A method for enabling support for backwards compatibility in a User Domain, said method comprising:
- in one of a Rights Issuer (RI) and a Local Rights Manager (LRM), receiving a Rights Object Encryption Key (REK) and encrypted REK from an entity that generated a User Domain Authorization for the one of the RI and the LRM;
- and
- using said REK to generate a User Domain Rights Object (RO) that includes the User Domain Authorization and the encrypted REK.
A method for targeting a User Domain RO to an SCE-conformant DRM Agent, said method comprising:
- in one of a Rights Issuer (RI) and a Local Rights Manager (LRM),
- validating that the SCE-conformant DRM Agent is in a User Domain;
- targeting the User Domain RO to the SCE-conformant DRM Agent;
- and
- generating the targeted User Domain RO to the SCE-conformant DRM Agent.
A method of moving a User Domain RO from a source SCE-conformant DRM Agent to a recipient SCE-conformant DRM agent through operation of a Rights Issuer (RI), said method comprising:
- receiving a request to move a User Domain RO from the source SCE-conformant DRM Agent to the recipient SCE-conformant DRM Agent;
- receiving an identity certificate of the source SCE-conformant DRM Agent;
- determining whether the source SCE-conformant DRM Agent is valid;
- generating a targeted User Domain RO for the recipient SCE-conformant DRM Agent using at least one of information contained in and derived from the identity certificate of the source SCE-conformant DRM Agent;
- and
- communicating the targeted User Domain RO to the recipient SCE-conformant DRM Agent.
A method of directly moving a User Domain RO from a source SCE-conformant DRM Agent to a recipient SCE-conformant DRM Agent, said method comprising:
- in the recipient SCE-conformant DRM Agent,
- receiving at least one of an attribute certificate and a User Domain Authorization of the source SCE-conformant DRM Agent and the User Domain RO;
- determining whether the source SCE-conformant DRM Agent is a valid member of the User Domain;
- and
- receiving an encrypted REK from the source SCE-conformant DRM Agent in response to the source SCE-conformant DRM Agent being determined as being a valid member of the User Domain.
Dependencies are inferred from the claim text.