Abstract:
A device is provided for use with a digital content provider and a content purchaser. The content provider can provide digital content and a first digital key, wherein the digital content has quantified digital rights associated therewith. The device includes a receiving portion, a security portion, a content database, an interface portion and a transmitting portion. The receiving portion can receive the digital content and the first digital key. The security portion can access the digital content with the first digital key. The content database can store the digital content. The interface portion can offer to the content purchaser the digital content and can enable the content purchaser to purchase the digital content in accordance with purchased quantified digital rights. The security portion can further encrypt the digital content with a second digital key such that the content purchaser may use the purchased digital content.
Abstract:
A method is provided for creating an encrypted data file (700) from a data file having a sample entry box and a media data box. The sample entry box has description information therein. The media data box includes media data therein. The method includes: receiving the data file; encrypting the media data within the media data box with an encryption key; replacing the sample entry box with an encoded box (302); creating a sinf box (702) within the encoded box (302); creating a frma box (306) within the sinf box (702); and creating an schm box (704) within the sinf box (702). The schm box (704) indicates the type of formatting of the encrypted media data. The encoded box (302) does not include an initial counter that may be used to decrypt the encrypted media data.
Abstract:
A process may be utilized by a DVR. The process characterizes a set of content as a plurality of segments as the set of content is received. Each of the segments has a segment length according to a predetermined time interval. Further, the process encrypts each of the segments with a corresponding content encryption key to generate a plurality of encrypted segments. The corresponding content encryption key for each of the segments is generated by the DRM component. In addition, the process stores each of the encrypted segments for playback with trick play features in accordance with an expiration content rule having a time limit on the temporary playability of the set of content.
Abstract:
A system (100) for determining whether a client (102) is authorized to access content in a communication network (114) is disclosed. The system includes a computer software product (106, 112) containing programming instructions for defining content access rules in connection with accessing the content and for identifying client selections related to the content. The computer software product (106, 112) further includes programming instructions for providing client entitlement data. The computer software product (106, 112) further includes programming instructions for comparing the client entitlement data with the content access rules and the client selections to determine whether the client is authorized to access the content. Optionally, the computer software product (106, 112) also includes programming instructions that allow additional rules to be added to the content access rules. These additional rules can be added by other parties that are involved in the process of providing the requested content to the client.
Abstract:
A digital rights management architecture for securely delivering content to authorized consumers. The architecture includes a content provider and a consumer system for requesting content from the content provider. The content provider generates a session rights object having purchase options selected by the consumer. A KDC thereafter provides authorization data to the consumer system. Also, a caching server is provided for comparing the purchase options with the authorization data. The caching server forwards the requested content to the consumer system if the purchase options match the authorization data. Note that the caching server employs real time streaming for securely forwarding the encrypted content, and the requested content is encrypted for forwarding to the consumer system. Further, the caching server and the consumer system exchange encrypted control messages (and authenticated) for supporting transfer of the requested content. In this manner, all interfaces between components are protected by encryption and/authenticated.
Abstract:
Content delivered to client device over an Internet Protocol Multimedia Subsystem (IMS)-based network is protected through a digital rights management (DRM) scheme that leverages IMS service and access infrastructure, such as the IMS core. After authentication and selection of content to be played for the user, the network identifies a key management system having keys for decrypting the selected content. A bootstrapping service function participates in an application-level authentication of the client device to establish a secure communication channel between the key management system and the client device. The key management system responds to a content key request received from the client device by providing a content key via the secure communication channel. The network can then stream content to the client device, which decrypts it using the content key.
Abstract:
A process is provided. The process determines member devices in a domain of devices. Further, the process encrypts a set of content with a content encryption key to generate an encrypted set of content. In addition, the process encrypts the content encryption key with each of a plurality of pre-fetch keys to generate a plurality of encrypted content encryption keys. Each of the pre-fetch keys corresponds to a member device in the domain of devices. Finally, the process stores each of the encrypted content encryption keys in a content license corresponding to a member device in the domain of devices. The encrypted content may be stored on a removable medium. Further, the process allows another device to play back the content from the same removable medium.
Abstract:
A system for processing copy control information in a digital rights management system in standard languages such as XML, XrML and ODML. Concise and descriptive schemas are provided that provide differing levels of compactness and readability. In one embodiment, default values are used so that all attribute values do not have to be provided by a digital rights management definition author. Abbreviated descriptive names can be used along with value aliases to provide readily understandable definitions.
Abstract:
A method and system for transmitting content from a content provider to a caching server and then from the caching server to a viewer. The method comprises encrypting the content with a pre-encryptor application before the content is transmitted to the caching server. The pre-encryptor application uses a pre-encryption subkey provided by a key storage service to perform the pre-encryption. The key storage service is a stand-alone component of the system and generates, stores, and distributes the pre-encryption subkeys.
Abstract:
A system for determining whether a client is authorized to access content in a communication network. The system includes a computer software product containing programming instructions for defining generic rules for accessing the content, and for identifying client selections related to the content. The computer software product further includes programming instructions for providing client entitlement data. The client entitlement data is compared to the generic rules and the client selections to determine whether the client is authorized to access the content. The computer software product further includes programming instructions for comparing the client entitlement data with the generic rules and the client selections to determine whether the client is authorized to access the content.