Techniques for defining, using and manipulating rights management data structures

A descriptive data structure embodied on a computer-readable medium or other logic device, including the following elements:

• identification information at least in part identifying a first rights management data structure;
• organization information at least in part describing the organization of at least some governed information contained within or referenced by the first rights management data structure;
• rule information relating to a first rule used to at least in part govern use of at least a portion of the governed information contained within the first rights management data structure;
• and
• a second rule used to at least in part govern use of at least a portion of the descriptive data structure.

A distributed data processing arrangement including:

• a first data processing apparatus including:
• a central processing unit;
• and
• a first memory storing (1) a descriptive data structure, the descriptive data structure including information regarding a first organization of elements within a secure container, and (2) a first rule at least in part governing use of at least a portion of the descriptive data structure;
• and
• a second data processing apparatus including:
• a central processing unit;
• and
• a second memory storing a first secure container including:
• data elements organized at least in part in accordance with the information contained in the descriptive data structure;
• and
• a rule set made up of at least a second rule, the rule set used to at least in part govern at least one aspect of access to or use of the data elements;
• the second rule requiring that information regarding at least one use of at least one of the data elements be at least temporarily recorded.

A method of using a descriptive data structure, at a first data processing arrangement located at a first site, including:

• receiving a first secure container including governed information;
• receiving a first rule set including at least one rule, the first rule set governing at least one aspect of access to or use of the governed information and containing a first rule at least in part governing at least one aspect of an auditing process involving the governed information;
• receiving a second secure container including a descriptive data structure, the descriptive data structure including information at least in part describing or representing at least one aspect of the organization of the first secure container governed information;
• receiving a second rule set including at least one rule, the second rule set governing at least one aspect of access to or use of the descriptive data structure;
• using the second rule set to gain access to at least a portion of the descriptive data structure;
• and
• using the accessed descriptive data structure portion to make a use of the first secure container governed information.

A method of creating a first secure container, including:

• accessing a first control, which at least in part governs use of a descriptive data structure;
• in compliance with the first rule, accessing the descriptive data structure, which includes or addresses:
• organization information at least in part describing a required or desired organization of a content section of the first secure container, and
• metadata information at least in part specifying at least one step required or desired in creation of the first secure container;
• organizing information contained in the first secure container using the descriptive data structure;
• and
• using the metadata information to at least in part generate or identify a second control designed to govern at least one aspect of access to or use of at least a portion of the information contained in the first secure container.