Digital rights managmenet using attribute-based encryption

A data receiver (10) for use in a digital rights management system, comprising

• a data access subsystem (11) for accessing data, using attribute-based decryption, in dependence on a decryption key (16) associated with a set of attributes;
• and
• a usage-constraining subsystem (12) for constraining the access to the data (20), based on a license (17) comprising a representation of a set of usage rights (18) associated (19) with the data.

A license (17) for use in a digital rights management system according to claim. 10, comprising a representation of a set of usage rights (18), and an association. (19) of the set of usage rights with data (20) protected using attribute-based encryption in dependence on an access policy over a set of attributes.

A method of providing data for use in a digital rights management system, comprising

• protecting (201) data, using attribute-based encryption, in dependence on an access policy over a plurality of attributes;
• and
• issuing (202) a license comprising a representation of a set of usage rights, wherein the set of usage rights is associated with the data, for granting the usage rights in respect of the data to a plurality of entities having attributes satisfying the access policy.

A method of receiving data for use in a digital rights management system, comprising

• accessing (301) data, using attribute-based decryption, in dependence on a decryption key associated with a set of attributes;
• and
• constraining (302) the access to at least part of the data, based on a license comprising a representation of a set of usage rights associated with the data.