METHOD AND APPARATUS FOR COMPOSING A DIGITAL RIGHTS MANAGEMENT LICENSE FORMAT
    31.
    发明申请
    METHOD AND APPARATUS FOR COMPOSING A DIGITAL RIGHTS MANAGEMENT LICENSE FORMAT 审中-公开
    用于组合数字权限管理许可格式的方法和装置

    公开(公告)号:WO2009009191A2

    公开(公告)日:2009-01-15

    申请号:PCT/US2008/060715

    申请日:2008-04-18

    CPC classification number: G06F21/10 G06Q10/06

    Abstract: A process composes a content license for a set of content. The content license has a static portion and a dynamic portion. Further, the process inserts a master key into the static portion. In addition, the process inserts a plurality of content rule sets of values into the dynamic portion and composes a unique content encryption key for each segment of content associated with one of the content rule sets of values as each of the content rule sets of values is sequentially received during recording of the content. The unique content encryption key is based on the master key and at least a subset of the content rule set of values for a corresponding segment of the content. The unique content encryption key is utilized for encryption of each segment of the content to generate a plurality of encrypted content segments for storage on the storage medium.

    Abstract translation: 一个进程组成一组内容的内容许可证。 内容许可证具有静态部分和动态部分。 此外,该过程将主密钥插入静态部分。 此外,该过程将多个内容规则集值集合插入到动态部分中,并且对于与内容规则集值之一相关联的每个内容段,构成唯一内容加密密钥,因为每个内容规则集值是 在记录内容期间顺序地接收。 唯一内容加密密钥基于主密钥以及内容的相应段的内容规则集合的集合的至少一个子集。 独特的内容加密密钥用于加密内容的每个段,以生成用于存储在存储介质上的多个加密的内容段。

    FLEXIBLE PRICING MODEL FOR PERSISTENT CONTENT

    公开(公告)号:WO2006071495A3

    公开(公告)日:2006-07-06

    申请号:PCT/US2005/044818

    申请日:2005-12-12

    Abstract: A digital rights management method (250) and apparatus (10) for protecting digital content enables a flexible pricing model to be implemented that accounts for a subscriber's current subscription type. The digital rights management method (250) provides (251) a purchase option element for each protected digital content. This purchase option element includes specifying a set of content usage rules (which may or may not allow for the content to be saved persistently). The digital rights management method (250) also includes specifying (252) a cost for each protected digital content associated with the set of content usage rules. The digital rights management method (250) also includes specifying (253) a subscription group for the protected digital content associated with a set of content usage rules, which subscription group includes one or more subscription services and one or more associated incremental discounts for the protected digital content based on the one or more associated subscription services.

    ACCESS CONTROL AND KEY MANAGEMENT SYSTEM FOR STREAMING MEDIA
    36.
    发明申请
    ACCESS CONTROL AND KEY MANAGEMENT SYSTEM FOR STREAMING MEDIA 审中-公开
    用于流媒体的访问控制和关键管理系统

    公开(公告)号:WO2003107625A1

    公开(公告)日:2003-12-24

    申请号:PCT/US2003/018782

    申请日:2003-06-12

    Abstract: A session rights object and authorization data are used for defining a consumer's access right to a media content stream. The access rights are determined at a caching server (115) remotely located from the consumer (116) rather than locally at the end user site. In a first aspect, in a computing network having a content provider (102), a key distribution center, a caching server (115) and a client (116) a method for controlling client access to a real-time data stream from the caching server, is disclosed. The method includes receiving, by the client, a session rights object from a content provider, the session rights object defining access rules for accessing the real-time data stream; receiving, by the client, authorization data from the key distribution center, the authorization data defining the client's access rights to the real-time data stream; forwarding to the caching server the session rights object and the authorization data; comparing, by the caching server, the session rights object with the authorization data to determine client authorization; and if the client is authorized, streaming, by the caching server, the real-time data stream to the client.

    Abstract translation: 会话权限对象和授权数据用于定义消费者对媒体内容流的访问权限。 访问权限在远离消费者(116)的缓存服务器(115)确定,而不是在最终用户站点本地。 在第一方面,在具有内容提供商(102),密钥分配中心,缓存服务器(115)和客户机(116)的计算网络中,控制客户端从缓存中访问实时数据流的方法 服务器,被披露。 该方法包括从客户端接收来自内容提供商的会话权限对象,会话权限对象定义用于访问实时数据流的访问规则; 由客户端从密钥分配中心接收授权数据,定义客户端对实时数据流的访问权限; 转发到缓存服务器会话权限对象和授权数据; 通过缓存服务器比较会话权限对象与授权数据进行比较,以确定客户端授权; 并且如果客户端被授权,则通过缓存服务器流式传输到客户端的实时数据流。

    SECURE MANAGEMENT AND PERSONALIZATION OF UNIQUE CODE SIGNING KEYS
    39.
    发明申请
    SECURE MANAGEMENT AND PERSONALIZATION OF UNIQUE CODE SIGNING KEYS 审中-公开
    安全管理和个性化独特的代码签名

    公开(公告)号:WO2012112273A1

    公开(公告)日:2012-08-23

    申请号:PCT/US2012/022725

    申请日:2012-01-26

    CPC classification number: G06F21/57

    Abstract: A method and system generates and distributes unique cryptographic device keys. The method includes generating at least a first device key and encrypting the first device key with a first encrypting key to produce a first encrypted copy of the device key. The method also includes encrypting the first device key with a second encrypting key to produce a second encrypted copy of the device key. The second encrypting key is different from said first encrypting key. The first and second encrypted copies of the device keys are associated with a device ID identifying a computing device being manufactured. The second encrypted copy of the device key is loaded onto the computing device. The first encrypted copy of the device key and the device ID with which it is associated are stored onto at least one server for subsequent use after the computing device has been deployed to a customer.

    Abstract translation: 方法和系统生成和分发唯一的加密设备密钥。 该方法包括至少生成第一设备密钥并用第一加密密钥加密第一设备密钥以产生设备密钥的第一加密副本。 该方法还包括用第二加密密钥加密第一设备密钥以产生设备密钥的第二加密副本。 第二加密密钥与所述第一加密密钥不同。 设备密钥的第一和第二加密副本与标识正在制造的计算设备的设备ID相关联。 设备密钥的第二个加密副本被加载到计算设备上。 在将计算设备部署到客户之后,设备密钥的第一加密副本和与其相关联的设备ID被存储在至少一个服务器上用于随后的使用。

    DYNAMIC CRYPTOGRAPHIC SUBSCRIBER-DEVICE IDENTITY BINDING FOR SUBSCRIBER MOBILITY
    40.
    发明申请
    DYNAMIC CRYPTOGRAPHIC SUBSCRIBER-DEVICE IDENTITY BINDING FOR SUBSCRIBER MOBILITY 审中-公开
    用于订户移动性的动态密码订阅者 - 设备身份绑定

    公开(公告)号:WO2011106769A3

    公开(公告)日:2011-09-01

    申请号:PCT/US2011/026465

    申请日:2011-02-28

    Abstract: A method of authentication and authorization over a communication system is provided. The method performs a first authentication of a device based on a set of device identity and credentials. The first authentication includes creation of a first set of keying material. The method also includes performing a second authentication of a subscriber based on a set of subscriber identity and credentials. The second authentication includes creation of a second set of keying material. A set of compound key material is created with a key derivation mechanism that uses the first set of keying material and the second set of keying material. A binding token is created by cryptographically signing at least the device identity authenticated in the first authentication and the subscriber identity authenticated in the second authentication using the set of compound keying material. The signed binding token is exchanged for verification with an authenticating and authorizing party.

    Abstract translation: 提供了通过通信系统进行认证和授权的方法。 该方法基于一组设备身份和凭证来执行设备的第一认证。 第一次认证包括创建第一组键控材料。 该方法还包括基于一组订户身份和凭证来执行订户的第二认证。 第二次认证包括创建第二组键控材料。 使用第一组键控材料和第二组键控材料的键推导机制来创建一组复合键材料。 绑定令牌是通过使用该组复合密钥材料对至少第一认证中认证的设备身份和第二认证中认证的订户身份进行密码签名而创建的。 已签名的绑定令牌与验证和授权方进行交换以进行验证。

Patent Agency Ranking