CONTENT MANAGEMENT SYSTEMS AND METHODS
This disclosure relates to, among other things, systems and methods for managing electronic content. Certain embodiments disclosed herein provide for a trusted data management platform that may interact with a trusted assertion service and/or a digital rights management service to manage access to and/or use of electronic content. Content creators and/or other content rights holder may register their content and/or associate rights using the trusted data management platform and/or a trusted assertion service and be assured that their content rights are securely managed and respected.
1 . A method for securely registering electronic content performed by a trusted data management platform comprising a processor and a non-transitory computer-readable medium storing instructions that, when executed by the processor, cause the trusted data management platform to perform the method, the method comprising:
receiving, by the trusted data management platform from a system requesting to register electronic content with the trusted data management platform, an access request;
authenticating an identity access token associated with the access request with an identity and access management service;
receiving, from the system requesting to register electronic content with the trusted data management platform, an electronic content file, metadata associated with the electronic content file, and an identifier associated with a rightsholder of the electronic content file;
issuing a content registration request to a trusted program executing in a secure execution environment of the trusted data management platform, the content registration request comprising the electronic content file and the metadata associated with the electronic content file;
generating, by the trusted program, a binding, the binding comprising the electronic content file, the metadata associated with the electronic content file, the identifier associated with the rightsholder of the electronic content file, and a timestamp;
generating, by the trusted program, a signed hash of the binding using, at least in part, a secure cryptographic key associated with the trusted program; and
registering, by the trusted program, the signed hash of the binding with a trusted ledger maintained by a ledger service.
2 . The method of claim 1 , wherein the binding further comprises a binding identifier generated by the trusted program.
3 . The method of claim 1 , wherein the identifier associated with the rightsholder of the electronic content file comprises a songwriter identifier.
4 . The method of claim 1 , wherein the rightsholder of the electronic content file comprises a creator of the electronic content file.
5 . The method of claim 1 , wherein the secure execution environment of the trusted data management platform is protected using at least one of secure hardware and secure software.
6 . The method of claim 1 , wherein the secure execution environment of the trusted data management platform is protected using whitebox cryptographic protection.
7 . The method of claim 1 , wherein the identity access token comprises a token issued by the identity and access management service in response to a successful authentication of a web token.
8 . The method of claim 7 , wherein the web token comprises a token issued by an identity management provider service in response to a successful authentication of credentials provided by the system requesting to register electronic content with the trusted data management platform.
9 . The method of claim 1 , wherein the identity and access management service is a service of the trusted data management platform.
10 . The method of claim 1 , wherein the content registration request further comprises the identity access token.
11 . The method of claim 10 , wherein authenticating the identity access token with an identity and access management service comprises:
issuing, by the trusted program, an authentication request to the identity and access management service, the authentication request comprising the identity access token; and
receiving, by the trusted program, an authentication response from the identity and access management service, the authentication response comprising an indication that the identity access token was successfully authenticated by the identity and access management service.
12 . The method of claim 1 , wherein the method further comprises receiving, by the trusted program from the ledger service, an indication that the signed hash of the binding was successfully entered into the trusted ledger.
13 . The method of claim 1 , wherein the method further comprises issuing, by the trusted program, a content insertion request to a file server service, the content insertion request comprising the electronic content file, the metadata associated with the electronic content file, and the identifier associated with the rightsholder of the electronic content file.
14 . The method of claim 13 , wherein the content insertion request further comprises one or more of the identity access token and the timestamp information.
15 . The method of claim 13 , wherein the file server service is a service of the trusted data management platform.
16 . The method of claim 13 , wherein the binding further comprises a binding identifier generated by the trusted program, and wherein the content insertion request further comprises the binding identifier.
17 . The method of claim 13 , wherein the method further comprises sending, to the system requesting to register electronic content with the trusted data management platform, an indication confirming that the electronic content file was registered with the trusted data management platform.
18 . The method of claim 17 , wherein the method further comprises receiving, from the file server service, and indication that at least the electronic content file was inserted into a file database management by the file server service.
19 . The method of claim 1 , wherein the indication confirming that the electronic content file with registered with the trusted data management platform comprises an indication of a binding identifier associated with the binding.
20 . The method of claim 1 , wherein the trusted ledger comprises a trusted immutable distributed assertion ledger.