Digital rights management systems and methods using efficient messaging architectures
This disclosure relates to systems and methods for managing protected electronic content that employ relatively efficient messaging schemes. Rights management architectures are described that may, among other things, provide end-to-end protection of content keys from their point of origination at a content creator and/or content service to end user devices. Certain embodiments may further provide for message protocols where fewer messages are sent in connection with a protected content license request process, thereby reducing latency associated with license request and provisioning processes.
1. A method for managing protected content performed by a rights management system comprising a processor and a non-transitory computer-readable medium storing instructions that, when executed by the processor, cause the system to perform the method, the method comprising:
receiving, from a content service system, a license request message, the content service system being a different system than the rights management system, the license request message comprising information identifying a piece of protected electronic content and an encrypted content key associated with the piece of protected content, the encrypted content key being encrypted using a public key of a user device, the user device being a different system than the rights management system and the content service system;
receiving encrypted communication session state information associated with the license request message, wherein the communication session state information comprises address information associated with the user device;
generating a content license based on the license request message, wherein an unencrypted version of the content key is not exposed to the rights management system during generation of the content license; and
transmitting the content license to the user device based, at least in part, on the received encrypted communication session state information.
2. The method of claim 1 , wherein the communication session state information is received from the user device.
3. The method of claim 1 , wherein the communication session state information is received from a session state database system.
4. The method of claim 1 , wherein the communication session state information is included in the license request message received from the content service system.
5. The method of claim 1 , wherein the content license comprises the encrypted content key associated with the piece of protected content.
6. The method of claim 1 , wherein the method further comprises:
decrypting the communication session state information using a decryption key shared with the content service system.
7. The method of claim 1 , wherein the communication session state information comprises communication port information associated with the user device.
8. The method of claim 1 , wherein transmitting the content license to the user device comprises transmitting one or more communication packets comprising the content license to the user device having a source address associated with the content service.
9. The method of claim 1 , wherein the license request message further comprises one or more license constraints specified by the content service.
10. The method of claim 9 , wherein generating the content license comprises generating the content license in accordance with the one or more license constraints.
11. The method of claim 1 , wherein the content license comprises at least one license term configured to be enforced in connection accessing the piece of electronic content.