Digital rights management system
View Patent ↗A digital rights management system including a controlled content disk to store content in an encrypted format, and a processor to run a plurality of applications and a secure device driver thereon, the processor being operationally associated with the controlled content disk, the applications being unable to decrypt content from the encrypted format, the secure device driver having a receiving module to receive a request from one of the applications to access the content, a validation module to validate the request based upon a recognized access pattern to the content by the one application, and a transport module to transfer the content from the controlled content disk to the one application, contingent upon a positive result of the validating of the validation module. Related apparatus and methods are also described.
1. A digital rights management system comprising:
a controlled content disk to store content in an encrypted format; and
a processor to run a plurality of applications and a secure device driver thereon, the processor being operationally associated with the controlled content disk, the applications being unable to decrypt content from the encrypted format, the secure device driver having:
a receiving module to receive a request from one of the applications to access the content;
a validation module to validate the request based upon a recognized access pattern of behavior by which the one application accesses a file in which the content is embodied, the access pattern being based on an order in which the one application accesses different parts of the content; and
a transport module to transfer the content, from the controlled content disk to the one application, contingent upon a positive result of the validating of the validation module.
2. The system according to claim 1 , wherein the controlled content disk includes a secure section to store data therein such that the data stored in the secure section is unavailable to the applications.
3. The system according to claim 2 , wherein the secure section is operative such that the data stored in the secure section is hidden from the applications.
4. The system according to claim 2 , wherein the data of the secure section includes rights objects.
5. The system according to claim 2 , wherein the data of the secure section includes at least one of codes, keys and identification data.
6. The system according to claim 2 , wherein the data of the secure section includes digital rights management database information.
7. The system according to claim 2 , wherein the validation module validates the request in accordance with at least one right of the one application.
8. The system according to claim 1 , wherein the validation module validates the request based on a name of the one application.
9. The system according to claim 1 , wherein the validation module validates the request based on a secure wrapper of the one application, the secure wrapper including a digitally signed hash of the one application.
10. The system according to claim 1 , wherein the validation module includes a differentiation section to differentiate between a plurality of request types of the one application, such that the validation module validates the request based upon the request type of the request.
11. The system according to claim 10 , wherein the request types include at least one of access for play and access for sending.
12. The system according to claim 10 , wherein the differentiation section determines the request type by examining the access characteristics of the one application.
13. The system according to claim 10 , wherein the differentiation section determines the request type by examining the stack of the one application.
14. The system according to claim 1 , wherein the transport module includes a decryption section to decrypt the content, such that decrypted content is transferred to the one application.
15. The system according to claim 1 , wherein the access pattern is based on the one application never legitimately accessing a part of the file including the content.
16. The system according to claim 1 , wherein the validation module is operative to validate the request based upon whether the one application is able to run the content.
17. A method for managing access by at least one application to content stored in a controlled content disk, the method comprising:
receiving a request, by a secure device driver, from one application which is running in a processor, to access the content stored in the controlled content disk;
validating the request, by the secure device driver, based upon a recognized access pattern of behavior by which the one application accesses a file in which the content is embodied, the access pattern being based on an order in which the one application accesses different parts of the content; and
transferring the content, by the secure device driver, from the controlled content disk to the one application, contingent upon a positive result of the validating.
18. A digital rights management system comprising:
means for storing content in an encrypted format; and
means for running a plurality of applications, the applications being unable to decrypt content from the encrypted format;
means for receiving a request from one of the applications to access the content;
means for validating the request based upon a recognized access pattern of behavior by which the one application accesses a file in which the content is embodied, the access pattern being based on an order in which the one application accesses different parts of the content; and
means for transferring the content, from the means for storing to the one application, contingent upon a positive result of the validating.