Systems, methods, and apparatus for facilitating client-side digital rights compliance

A method for facilitating intellectual property rights compliance by an application comprising:

• receiving a structured document from a first domain, the structured document having:
• at least one content object,
• a reference to at least one digital rights compliance (DRC) object located on a second domain and associated with the at least one content object, and
• application-specific instructions being executable by the application, the at least one DRC object being defined in a non-executable format and containing information indicative of rights associated with the at least one content;
• executing the application-specific instructions to cause the application to send at least one request to the second domain for the at least one DRC object;
• receiving the at least one DRC object from the second domain;
• executing the application-specific instructions to cause the application to modify the structured document by incorporating the at least one DRC object into the structured document;
• and
• executing the application-specific instructions to cause the application to present the at least one content object in accordance with the at least one DRC object;
• wherein the application is compliant with a same-origin security policy that prohibits the application from executing application-specific instructions from the first domain that access application-specific instructions from the second domain

A non-transient physical computer-readable storage medium comprising:

• a structured document, the structured document having at least one content object, a reference to at least one digital rights compliance (DRC) object located on another domain, the at least one DRC object being defined in a non-executable format and containing information indicative of rights associated with the at least one content, and instructions being executable by an application for performing operations including
• sending at least one request to the remote domain for the at least one DRC object;
• receiving the at least one DRC object from the remote domain;
• and
• presenting the at least one content in accordance with the at least one DRC object;
• wherein the application is compliant with a same-origin security policy that prohibits the application from executing application-specific instructions from a first domain that causes the application to execute application-specific instructions from a second domain.