# US 8,474,054 B2 · Systems and methods for conditional access and digital rights management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,474,054 B2 - Document ID: US8474054B2 - Status: Granted - Kind: B2 - Application number: 11/823,194 - Filed: 2007-06-26 - Published: 2009-01-01 - Granted: 2013-06-25 - Earliest claimed: 2007-06-26 - Assignees: Digital Keystone, Inc. - Applicants: Luc Vantalon; Paolo Siccardo - Inventors: Luc Vantalon; Paolo Siccardo - Web page: https://patentgrep.com/patent/US8474054B2 ## CPC - G06F 21/105: {Arrangements for software license management or administration, e.g. for managing licenses at corporate level} - G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} - H04N 7/1675: {Providing digital key or authorisation information for generation or regeneration of the scrambling sequence (pseudo-random number generators in general G06F7/58)} - H04N 21/2347: involving video stream encryption - H04N 21/2541: {Rights Management (protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08)} - H04N 21/2543: Billing {, e.g. for subscription services (payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21)} - H04N 21/4405: involving video stream decryption - H04N 21/8355: involving usage data, e.g. number of copies or viewings allowed - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION ## Abstract Conditional access (CA) and digital rights management (DRM) in digital media delivery, processing, and storage systems. Methods and apparatuses are provided for managing digital rights under the protection of multiple CA and/or DRM systems. Some embodiments provide secure and robust methods for bridging multiple DRM systems in the digital media content distribution and playback systems. The present invention simplifies content repurposing, after it has been bridged to a secondary DRM system, but still under the control of the original DRM system. ## Claims ### Claim 1 A method for repurposing a media originated from an original digital rights management system and passed through a bridge to be under the protection of a secondary digital rights management system, the method comprising: receiving a license upgrade request, by a server of the secondary digital rights management system, with license renewal data, wherein the license renewal data have been previously created and secured, through encryption and authentication by the original digital rights management system and have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system; sending, by the server of the secondary digital rights management system, a request for an authorization to upgrade the secondary digital rights management license to the original digital rights management system, the request including the license renewal data; receiving, by the server of the secondary digital rights management system, the authorization, wherein the authorization is provided from the original digital rights management system based on the license renewal data; and upgrading, by the server of the secondary digital rights management system, the secondary digital rights management license based on the authorization to provide upgraded rights to access the media from the secondary digital rights management system. ### Claim 2 (depends on 1) A method as in claim 1 wherein the bridge includes a client of the original digital rights management (DRM) system and the server of the secondary DRM system. ### Claim 3 (depends on 1) A method as in claim 1 wherein the authorization from the original digital rights management system is provided by a billing system that is configured to authorize the upgrading of the media access to the secondary digital rights management system. ### Claim 4 (depends on 1) A method as in claim 1 wherein upgrading the secondary digital rights management license comprises at least one of extending a lifetime of the license, enabling new rights, enabling new exports, enabling move operation or restoration operation to another machine, or any combination thereof. ### Claim 5 (depends on 1) A method as in claim 1 wherein some of the license renewal data include at least one of data identifying a preferred secondary DRM update server, subscriber identification data, device identification data, media identification data, targeted DRM client data, schedule data, and data for a DRM update server to retrieve a key for the media. ### Claim 6 (depends on 1) A method as in claim 1, wherein the license renewal data are not decryptable by the secondary digital rights management system. ### Claim 7 A method for a client of a secondary digital rights management system to get an upgraded access to a media originated from an original digital rights management system, the media stored within the access of the client of the secondary digital rights management system, the media sent through a bridge from the original digital rights management system to the secondary digital rights management system, and wherein license renewal data have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, the method comprising: sending, by the client of the secondary digital rights management system, a request with the license renewal data to a server of the secondary digital rights management system to get an upgraded license or rights; receiving, by the client of the secondary digital rights management system, the upgraded license or rights to access the media, wherein the upgraded license or rights is created by the server of the secondary digital rights management system based on an authorization sent from the original digital rights management system, wherein the authorization is provided by the original digital rights management system based on the license renewal data sent by the client of the secondary digital rights management system, wherein the license renewal data have been previously created and secured, through encryption and authentication by the original digital rights management system and have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, wherein the upgraded license or rights is configured to provide upgraded rights to access the media by the secondary digital rights management system. ### Claim 8 (depends on 7) A method as in claim 7 wherein the server of the secondary digital rights management system comprises an upgrade server of the secondary digital rights management system, and wherein the upgrade server of the secondary digital rights management system sends a request for the authorization to the original digital rights management system to get the upgrade license or rights. ### Claim 9 (depends on 8) A method as in claim 8 wherein the upgrade server of the secondary digital rights management system comprises a server in the bridge, or a separate independent server. ### Claim 10 (depends on 8) A method as in claim 8 wherein the original digital rights management system for the communication comprises at least one of a server sending the media, and a separate billing or upgrade server of the original digital rights management system. ### Claim 11 (depends on 8) A method as in claim 8 wherein the client sends the request to the bridge, or to an independent server of the secondary digital rights management system before reaching the original digital rights management system. ### Claim 12 (depends on 7) A method as in claim 7 wherein the authorization is sent from the original digital rights management (DRM) system to the secondary digital rights management system and wherein the bridge includes a client of the original DRM system and the server of the secondary DRM system. ### Claim 13 (depends on 7) A method as in claim 7 wherein the authorization from the original digital rights management system is provided by a billing system that is configured to authorize the upgrading the access to the media to the secondary digital rights management system. ### Claim 14 (depends on 7) A method as in claim 7 wherein the upgraded license or rights is configured to provide at least one of extending the lifetime of the license, enabling new rights, enabling new exports, enabling move operation or restoration operation to another machine, or any combination thereof. ### Claim 15 (depends on 14) A method as in claim 14 wherein enabling new rights comprises allowing additional copy. ### Claim 16 (depends on 14) A method as in claim 14 wherein enabling new exports comprises additional bridging. ### Claim 17 (depends on 7) A method as in claim 7 wherein some of the license renewal data include at least one of data identifying a preferred secondary DRM update server, subscriber identification data, device identification data, media identification data, targeted DRM client data, schedule data, and data for a DRM update server to retrieve a key for the media. ### Claim 18 (depends on 17) A method as in claim 17 wherein some of the license renewal data are extracted and used to create the upgraded license. ### Claim 19 (depends on 17) A method as in claim 17 wherein some of the license renewal data are used to log or authorize the upgrade access transaction. ### Claim 20 A method for a client of a secondary digital rights management system to get an upgraded access to a media originated from an original digital rights management system, the media stored within the access of the client of the secondary digital rights management system, the media sent through a bridge from the original digital rights management system to the secondary digital rights management system and being translated to include an additional information to allow the upgraded operation to be reconciled with the original digital rights management system and so that the secondary digital rights management system can modify the access, the method comprising: sending, by the client of the secondary digital rights management system, a request with the additional information to an upgrade server of the secondary digital rights management system to get new rights to the media, wherein the upgrade server is configured to extract the additional information, wherein the additional information has been previously created and secured, through encryption and authentication by the original digital rights management system and has been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system; receiving, by the client of the secondary digital rights management system, the new rights to access the media wherein the new rights are provided by the upgrade server of the secondary digital rights management system based on an authorization sent from the original digital rights management system, wherein the authorization is provided by the original digital rights management system based on the additional information sent by the client of the secondary digital rights management system. ### Claim 21 (depends on 20) A method as in claim 20 wherein the bridge includes a client of the original digital rights management (DRM) system and a server of the secondary DRM system. ### Claim 22 (depends on 21) A method as in claim 21 wherein the additional information from the original digital rights management system comprises additional license renewal data. ### Claim 23 (depends on 22) A method as in claim 22 wherein the additional license renewal data are cryptographically linked to the license. ### Claim 24 (depends on 22) A method as in claim 22 wherein the additional license renewal data are also secured by the secondary digital rights management system. ### Claim 25 (depends on 22) A method as in claim 22 wherein the additional license renewal data comprise subscriber identification data, event identification data, time stamp, device identification data, renewal traceability data, restore data, encrypted content key, or any combination thereof. ### Claim 26 An apparatus repurposing a media, the media originated from an original digital rights management system and passed through a bridge to be under the protection of a secondary digital rights management system, the apparatus comprising: a processor; a memory coupled with said processor, said memory having contained therein sequences of instructions which, when executed by said processor, cause said processor to perform operations comprising: receiving a license upgrade request, by a server of the secondary digital rights management system, with license renewal data, wherein the license renewal data have been previously created and secured, through encryption and authentication by the original digital rights management system and have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, sending, by the server of the secondary digital rights management system, a request for an authorization to upgrade the secondary digital rights management license to the original digital rights management system, the request including the license renewal data; receiving, by the server of the secondary digital rights management system, the authorization, wherein the authorization is provided from the original digital rights management system based on the license renewal data; and upgrading, by the server of the secondary digital rights management, the secondary digital rights management license based on the authorization to provide upgraded rights to access the media from the secondary digital rights management system. ### Claim 27 (depends on 26) An apparatus as in claim 26 wherein the bridge includes a client of the original DRM system and the server of the secondary DRM system. ### Claim 28 (depends on 26) An apparatus as in claim 26 wherein the authorization from the original digital rights management system is provided by a billing system that is configured to authorize the upgrading the media access to the secondary digital rights management system. ### Claim 29 (depends on 26) An apparatus as in claim 26 wherein upgrading the secondary digital rights management license comprises at least one of extending a lifetime of the license, enabling new rights, enabling new exports, enabling move operation or restoration operation to another machine, or any combination thereof. ### Claim 30 (depends on 26) An apparatus as in claim 26 wherein some of the license renewal data include at least one of data identifying a preferred secondary DRM update server, subscriber identification data, device identification data, media identification data, targeted DRM client data, schedule data, and data for a DRM update server to retrieve a key for the media. ### Claim 31 An apparatus for a client of a secondary digital rights management system to get an upgraded access to a media originated from an original digital rights management system, the media stored within the access of the client of the secondary digital rights management system, the media sent through a bridge from the original digital rights management system to the secondary digital rights management system, and wherein license renewal data have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, the apparatus comprising: a processor; a memory coupled with said processor, said memory having contained therein sequences of instructions which, when executed by said processor, cause said processor to perform operations comprising sending, by the client of the secondary digital rights management system, a request with the license renewal data to a server of the secondary digital rights management system to get an upgraded license or rights; receiving, by the client of the secondary digital rights management system, the upgraded license or rights to access the media wherein the upgraded license or rights is created by the server of the secondary digital rights management system based on an authorization sent from the original digital rights management system, wherein the authorization is provided by the original digital rights management system based on the license renewal data sent by the client of the secondary digital rights management system, wherein the license renewal data have been previously created and secured, through encryption and authentication by the original digital rights management system and have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, wherein the upgraded license or rights is configured to provide upgraded rights to access the media by the secondary digital rights management system. ### Claim 32 (depends on 31) An apparatus as in claim 31 wherein the server of the secondary digital rights management system comprises an upgrade server of the secondary digital rights management system, and wherein the upgrade server of the secondary digital rights management system sends a request for an authorization to the original digital rights management system to get the upgrade license or rights. ### Claim 33 (depends on 32) An apparatus as in claim 32 wherein the upgrade server of the secondary digital rights management system comprises a server in the bridge, or a separate independent server. ### Claim 34 (depends on 32) An apparatus as in claim 32 wherein the original digital rights management system for the communication comprises at least one of a server sending the media, and a separate billing or upgrade server of the original digital rights management system. ### Claim 35 (depends on 32) An apparatus as in claim 32 wherein the client sends the request to the bridge, or to an independent server of the secondary digital rights management system before reaching the original digital rights management system. ### Claim 36 (depends on 31) An apparatus as in claim 31 wherein the authorization is sent from the original digital rights management (DRM) system to the secondary digital rights management system and wherein the bridge includes a client of the original DRM system and the server of the secondary DRM system. ### Claim 37 (depends on 31) An apparatus as in claim 31 wherein the authorization from the original digital rights management system is provided by a billing system that is configured to authorize the upgrading the access to the media to the secondary digital rights management system. ### Claim 38 (depends on 31) An apparatus as in claim 31 wherein the upgraded license or rights is configured to provide at least one of extending the lifetime of the license, enabling new rights, enabling new exports, enabling move operation or restoration operation to another machine, or any combination thereof. ### Claim 39 (depends on 38) An apparatus as in claim 38 wherein enabling new rights comprises allowing additional copy. ### Claim 40 (depends on 38) An apparatus as in claim 38 wherein enabling new exports comprises additional bridging. ### Claim 41 (depends on 31) An apparatus as in claim 31 wherein some of the license renewal data include at least one of data identifying a preferred secondary DRM update server, subscriber identification data, device identification data, media identification data, targeted DRM client data, schedule data, and data for a DRM update server to retrieve a key for the media. ### Claim 42 (depends on 31) An apparatus as in claim 31 wherein some of the license renewal data are extracted and used to create the upgraded license. ### Claim 43 (depends on 31) An apparatus as in claim 31 wherein some of the license renewal data are used to log or authorize the upgrade access transaction. ### Claim 44 An apparatus for a client of a secondary digital rights management system to get an upgraded access to a media originated from an original digital rights management system, the media stored within the access of the client of the secondary digital rights management system, the media sent through a bridge from the original digital rights management system to the secondary digital rights management system and being translated to include an additional information to allow the upgraded operation to be reconciled with the original digital rights management system and so that the secondary digital rights management system can modify the access, the apparatus comprising: a processor; a memory coupled with said processor, said memory having contained therein sequences of instructions which, when executed by said processor, cause said processor to perform operations comprising sending, by the client of the secondary digital rights management system, a request with the additional information to an upgrade server of the secondary digital rights management system to get new rights to the media, wherein the upgrade server is configured to extract the additional information, wherein the additional information has been previously created and secured, through encryption and authentication for use by the original digital rights management system and have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system; receiving, by the client of the secondary digital rights management system the new rights to access the media wherein the new rights are provided by the upgrade server of the secondary digital rights management system based on an authorization sent from the original digital rights management system, wherein the authorization is provided by the original digital rights management system based on the additional information sent by the client of the secondary digital rights management system. ### Claim 45 (depends on 44) An apparatus as in claim 44 wherein the bridge includes a client of the original digital rights management (DRM) system and a server of the secondary DRM system. ### Claim 46 (depends on 44) An apparatus as in claim 44 wherein the additional information from the original digital rights management system comprises additional license renewal data. ### Claim 47 (depends on 46) An apparatus as in claim 46 wherein the additional license renewal data are cryptographically linked to the license. ### Claim 48 (depends on 46) An apparatus as in claim 46 wherein the additional license renewal data are also secured by the secondary digital rights management system. ### Claim 49 (depends on 46) An apparatus as in claim 46 wherein the additional license renewal data comprise subscriber identification data, event identification data, time stamp, device identification data, renewal traceability data, restore data, encrypted content key, or any combination thereof. ### Claim 50 A machine non-transitory readable medium containing machine executable program instructions which, when executed by a data processing system, cause the data processing system to perform a method for repurposing a media, the media originated from an original digital rights management system and passed through a bridge to be under the protection of a secondary digital rights management system, the method comprising: receiving a license upgrade request by a server of the secondary digital rights management system, with license renewal data, wherein the license renewal data have been previously created and secured, through encryption and authentication by the original digital rights management system and have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, sending, by the server of the secondary digital rights management system, a request for an authorization to upgrade the secondary digital rights management license to the original digital rights management system, the request including the license renewal data; receiving, by the server of the secondary digital rights management system, the authorization, wherein the authorization is provided from the original digital rights management system based on the license renewal data; and upgrading, by the server of the secondary digital rights management system, the secondary digital rights management license based on the authorization to provide second rights to access the media from the secondary digital rights management system. ### Claim 51 (depends on 50) A medium as in claim 50 wherein the bridge includes a client of the original digital rights management (DRM) system and the server of the secondary DRM system. ### Claim 52 (depends on 50) A medium as in claim 50 wherein the authorization from the original digital rights management system is provided by a billing system that is configured to authorize the upgrading the media access to the secondary digital rights management system. ### Claim 53 (depends on 50) A medium as in claim 50 wherein upgrading the secondary digital rights management license comprises at least one of extending a lifetime of the license, enabling new rights, enabling new exports, enabling move operation or restoration operation to another machine, or any combination thereof. ### Claim 54 (depends on 50) A medium as in claim 50 wherein some of the license renewal data include at least one of data identifying a preferred secondary DRM update server, subscriber identification data, device identification data, media identification data, targeted DRM client data, schedule data, and data for a DRM update server to retrieve a key for the media. ### Claim 55 A machine non-transitory readable medium containing machine executable program instructions which, when executed by a data processing system, cause the data processing system to perform a method, the method to be used for a client of a secondary digital rights management system to get an upgraded access to a media originated from an original digital rights management system, the media stored within the access of the client of the secondary digital rights management system, the media sent through a bridge from the original digital rights management system to the secondary digital rights management system, and wherein license renewal data have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, the method comprising: sending, by the client of the secondary digital rights management system, a request with the license renewal data to a server of the secondary digital rights management system to get an upgraded license or rights; receiving, by the client of the secondary digital rights management system, the upgraded license or rights to access the media, wherein the upgraded license or rights is created by the secondary digital rights management system based on an authorization sent from the original digital rights management system, wherein the authorization is provided by the original digital rights management system based on the license renewal data sent by the client of the secondary digital rights management system, wherein the license renewal data have been previously created and secured, through encryption and authentication by the original digital rights management system and have been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system, wherein the upgraded license or rights is configured to provide upgraded rights to access the media by the secondary digital rights management system. ### Claim 56 (depends on 55) A medium as in claim 55 wherein the server of the secondary digital rights management system comprises an upgrade server of the secondary digital rights management system, wherein the upgrade server of the secondary digital rights management system sends a request for the authorization to the original digital rights management system to get the upgrade license or rights. ### Claim 57 (depends on 56) A medium as in claim 56 wherein the upgrade server of the secondary digital rights management system comprises a server in the bridge, or a separate independent server. ### Claim 58 (depends on 56) A medium as in claim 56 wherein the original digital rights management system for the communication comprises at least one of a server sending the media, and a separate billing or upgrade server of the original digital rights management system. ### Claim 59 (depends on 56) A medium as in claim 56 wherein the client sends the request to the bridge, or to an independent server of the secondary digital rights management system before reaching the original digital rights management system. ### Claim 60 (depends on 55) A medium as in claim 55 wherein the authorization is sent from the original digital rights management (DRM) system to the secondary digital rights management system and wherein the bridge includes a client of the original DRM system and the server of the secondary DRM system. ### Claim 61 (depends on 55) A medium as in claim 55 wherein the authorization from the original digital rights management system is provided by a billing system that is configured to authorize the upgrading the access to the media to the secondary digital rights management system. ### Claim 62 (depends on 55) A medium as in claim 55 wherein the upgraded license or rights is configured to provide at least one of extending the lifetime of the license, enabling new rights, enabling new exports, enabling move operation or restoration operation to another machine, or any combination thereof. ### Claim 63 (depends on 62) A medium as in claim 62 wherein enabling new rights comprises allowing additional copy. ### Claim 64 (depends on 62) A medium as in claim 62 wherein enabling new exports comprises additional bridging. ### Claim 65 (depends on 55) A medium as in claim 55 wherein some of the license renewal data include at least one of data identifying a preferred secondary DRM update server, subscriber identification data, device identification data, media identification data, targeted DRM client data, schedule data, and data for a DRM update server to retrieve a key for the media. ### Claim 66 (depends on 55) A medium as in claim 55 wherein some of the license renewal data are extracted and used to create the upgraded license. ### Claim 67 (depends on 55) A medium as in claim 55 wherein some of the license renewal data are used to log or authorize the upgrade access transaction. ### Claim 68 A machine non-transitory readable medium containing machine executable program instructions which, when executed by a data processing system, cause the data processing system to perform a method, the method to be used for a client of a secondary digital rights management system to get an upgraded access to a media originated from an original digital rights management system, the media stored within the access of the client of the secondary digital rights management system, the media sent through a bridge from the original digital rights management system to the secondary digital rights management system and being translated to include an additional information to allow the upgraded operation to be reconciled with the original digital rights management system and so that the secondary digital rights management system can modify the access, the method comprising: sending, by the client of the secondary digital rights management system, a request with the additional information to an upgrade server of the secondary digital rights management system to get new rights to the media, wherein the upgrade server is configured to extract the additional information, wherein the additional information has been previously created and secured, through encryption and authentication by the original digital rights management system and has been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system; receiving, by the client of the secondary digital rights management system, the new rights to access the media wherein the new rights are provided by the upgrade server of the secondary digital rights management system based on an authorization sent by the original digital rights management system, wherein the authorization is provided by the original digital rights management system based on the additional information sent by the client of the secondary digital rights management system. ### Claim 69 (depends on 68) A medium as in claim 68 wherein the bridge includes a client of the original digital rights management (DRM) system and a server of the secondary DRM system. ### Claim 70 (depends on 68) A medium as in claim 68 wherein the additional information from the original digital rights management system comprises additional license renewal data. ### Claim 71 (depends on 70) A medium as in claim 70 wherein the additional license renewal data are cryptographically linked to the license. ### Claim 72 (depends on 70) A medium as in claim 70 wherein the additional license renewal data are also secured by the secondary digital rights management system. ### Claim 73 (depends on 70) A medium as in claim 70 wherein the additional license renewal data comprise subscriber identification data, event identification data, time stamp, device identification data, renewal traceability data, restore data, encrypted content key, or any combination thereof. ### Claim 74 A method of repurposing a media originated from an original digital rights management (DRM) system and passed through a bridge to be under the protection of a secondary DRM, the method performed by at least one system of the original DRM, the method comprising: receiving, by the original digital rights management (DRM) system, a request to upgrade the media from a system in the secondary DRM, the request comprising additional information, wherein the additional information has been previously created and secured, through encryption and authentication by the original digital rights management system and has been previously added by the bridge to the media at the time the media was first issued to the secondary digital rights management system; transmitting an authorization from the at least one system of the original DRM in response to the request, wherein the authorization is provided by the at least one system of the original DRM based on the additional information, wherein the license of the secondary DRM is renewed by the secondary DRM in response to the authorization. ### Claim 75 A method of repurposing a media originated from an original digital rights management (DRM) system and passed through a bridge to be under the protection of a secondary DRM, the method performed by at least one component of the bridge, the method comprising: receiving, by the at least one component of the bridge, a request to upgrade access to the media with license renewal information from a system in the secondary DRM, wherein the license renewal information has been previously created and secured, through encryption and authentication by the original digital rights management system and has been previously added to the media by the bridge at the time the media was first issued to the secondary digital rights management system; extracting, by the at least one component of the bridge, the license renewal information; transmitting, by the at least one component of the bridge, the request to the original DRM system, the request comprising the license renewal information; receiving an authorization to upgrade the media, wherein the authorization is provided from the original digital rights management system based on the license renewal information; renewing the license of the media of the secondary DRM based on the authorization.