摘要:
A method and apparatus for managing access to resources that integrates both authorization and protection for a wide range of resources. The rights to access a protected resource are based on conditions. Conditions are associated with both resource the resource and the state of the resource to thereby protect the resource at various stages during its life cycle. Conditions that are associated with the entire life cycle of the protected resource can be expressed by use of a grammar including data structures, sets of rules or a language.
摘要:
A method, system, and computer program product for exercising rights based on determining trust in an issuance of a rights expression, including issuing rights expressions by a chain of servers, forming a chain of rights expressions issued from server to server and finally from the last server to a client, such that each of the rights expressions except the last includes a specification of rights for the next server to issue the rights in the next rights expression; determining whether or not each of the servers has a right to issue the respective rights expression; exercising by the client the rights expressed in the last rights expression as being trusted, if it is determined that each of the servers had a right to issue the respective rights expression; and not exercising by the client the rights expressed in the last rights expression as not being trusted, if it is determined that at least one of the servers did not have the right to issue the respective rights expression.
摘要:
Extensible grammar-based rights expression system for processing rights expressions including an interpreter with plug-in subcomponents, a validator, and a framework. In another embodiment, system includes a framework having an extensible architecture with extensibility points for adding extensions to the grammar, and an interpreter, the extensions defining semantics and syntax of new rights expressions. A method for processing rights expressions is also provided having the steps of registering plug-in components, making a programmatic call, finding and invoking appropriate plug-in components, evaluating the request against the grant, and returning an authorization result. In another embodiment, method includes the steps of providing an extensible grammar-based rights expression system having an extensible architecture with an interpreter, evaluating the request against the grant using the interpreter, and returning an authorization result. The method may include the step of adding new extensions to the rights expression system to allow processing of new rights expressions.
摘要:
A method, system, and computer program product for controlling consumption of a distributed network service in accordance with rights expression information associated with the distributed network service and specifying a manner of use of the distributed network service, including determining the rights expression information associated with the distributed network service, the rights expression information indicating a manner of use of the distributed network service; and controlling consumption of the distributed network service based on the rights expression information.
摘要:
A rights management system including one or more consequential rights associated with digital content, and specifying a manner of use of the digital content, a right management module that enforces the rights permitting use of the digital content in accordance with the rights upon occurrence of a consequential event. The consequential event is based on another usage right. In one embodiment, the consequential event is the exercise, expiration, or possession of another usage right.
摘要:
System and methods for manipulating rights expressions for use in connection with a rights management system include one or more tokenized templates. Each tokenized template includes one or more rights expression language statements and one or more tokens associated with at least one of the rights expression language statements. Further, the tokens can be place holders for data items or rights expression elements. The system further includes a license template module that creates the tokenized templates, and a license instance creation module that replaces at least one of the tokens in one or more selected license templates with one or more of the data items or rights expression elements to generate a license instance. Additionally, the system includes a license instance analysis module having sub-modules for validating and interpreting license instances, and a data parsing module for extracting data from created license instances.